CVE-2026-31935CWE-400CWE-770

Suricata http2: unbounded resource consumption

High · published April 2, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.5th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-04-02T14:36Z
EPSS history
Timeline
  • 02 APR 14:36Z
    Suricata http2: unbounded resource consumption
    cvelistv5