CVE-2026-22259

HIGH EPSS 39.5%
Published Jan 27, 20265mo ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
High
Find Similar
Published Jan 27, 2026 5mo ago
Last Modified Jun 17, 2026 2w ago

Description

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafted traffic can cause Suricata to consume large amounts of memory while parsing DNP3 traffic. This can lead to the process slowing down and running out of memory, potentially leading to it getting killed by the OOM killer. Versions 8.0.3 or 7.0.14 contain a patch. As a workaround, disable the DNP3 parser in the suricata yaml (disabled by default).

CVSS Details

Base Score
7.5
Exploitability
3.9
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
39.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 2

CWE-400 Uncontrolled Resource Consumption Resource Mgmt
CWE-770

Affected Products 2

VendorProductVersionRange
oisfsuricata* <7.0.14
oisfsuricata*≥8.0.0  –  <8.0.3

References 4

  • github.com https://github.com/OISF/suricata/commit/50cac2e2465ca211eabfa156623e585e9037bb7e
    Patch
  • github.com https://github.com/OISF/suricata/commit/63225d5f8ef64cc65164c0bb1800730842d54942
    Patch
  • github.com https://github.com/OISF/suricata/security/advisories/GHSA-878h-2x6v-84q9
    PatchVendor Advisory
  • redmine.openinfosecfoundation.org https://redmine.openinfosecfoundation.org/issues/8181
    Issue TrackingPermissions Required

Remediation

  • github.com https://github.com/OISF/suricata/commit/50cac2e2465ca211eabfa156623e585e9037bb7e
    Patch
  • github.com https://github.com/OISF/suricata/commit/63225d5f8ef64cc65164c0bb1800730842d54942
    Patch
  • github.com https://github.com/OISF/suricata/security/advisories/GHSA-878h-2x6v-84q9
    PatchVendor Advisory