Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-57225 →
DEBIAN-CVE-2026-57225
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/data...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/datasets-context-json.c assumes that a configured JSON or NDJSON dataset value_key resolves to a string. A trusted or untrusted dataset or rule feed containing a non-string value for that key can cause a NULL pointer dereference during startup, configuration test mode, or rule reload, crashing Suricata before traffic processing. This issue is fixed in version 8.0.6.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:13
suricata
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
suricata
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.0.6-1"}]}]
Références
- advisory security-tracker.debian.org