CVE-2026-31933
Suricata stream: quadratic complexity in stream inspection
Summary
Suricata stream: quadratic complexity in stream inspection
Original description
The description as published by the source.
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-31933 suricata
- Ubuntu UBUNTU-CVE-2026-31933 suricata
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web redmine.openinfosecfoundation.org