High · published November 27, 2025
⚡ A hefty HTTP content type can send Suricata crashing down like a house of cards! 🏠💥 Think of Suricata as a delicate restaurant balancing a huge buffet. If they try to handle a giant order all at once without enough staff, they might just topple over! If exploited, this vulnerability can cause Suricata to experience a stack overflow, resulting in a complete service crash. This means your network protection could be momentarily out of commission, leaving your systems vulnerable! That’s a dicey situation for any security setup.
Think of Suricata as a delicate restaurant balancing a huge buffet. If they try to handle a giant order all at once without enough staff, they might just topple over! This vulnerability occurs when Suricata logs an oversized HTTP content type, leading to a stack overflow. Specifically, versions prior to 7.0.13 and 8.0.2 are affected, which allows for this critical failure in the process.
If exploited, this vulnerability can cause Suricata to experience a stack overflow, resulting in a complete service crash. This means your network protection could be momentarily out of commission, leaving your systems vulnerable! That’s a dicey situation for any security setup. To mitigate this issue, upgrade Suricata to version 7.0.13 or 8.0.2 immediately. Alternatively, you can work around the issue by limiting the 'stream.reassembly.depth' to less than half of the stack size, or increase the process stack size for improved stability. You've got this! Follow these steps to strengthen your defenses and keep your network safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| oisf/suricata | < 7.0.13 | 7.0.13 |
| oisf/suricata | ≥ 8.0.0, < 8.0.2 | 8.0.2 |