CVE-2026-31933CWE-407

Suricata stream: quadratic complexity in stream inspection

High · published April 2, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.5th percentile
Weakness
CWE-407 · Inefficient Algorithmic Complexity
Published
2026-04-02T14:03Z
EPSS history
Timeline
  • 02 APR 14:03Z
    Suricata stream: quadratic complexity in stream inspection
    cvelistv5