CVE-2026-31932CWE-407

Suricata krb5: quadratic complexity in krb5 buffering

High · published April 2, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.5th percentile
Weakness
CWE-407 · Inefficient Algorithmic Complexity
Published
2026-04-02T14:02Z
EPSS history
Timeline
  • 02 APR 14:02Z
    Suricata krb5: quadratic complexity in krb5 buffering
    cvelistv5