Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The bytes setting in the decode_base64 keyword is not properly limited. Due to this, signatures using the keyword and setting can cause large memory allocations of up to 4 GiB per thread. This vulnerability is fixed in 7.0.9.
References
| Link | Resource |
|---|---|
| https://github.com/OISF/suricata/commit/32d0bd2bbb4d486623dec85a94952fde2515f2f0 | Patch |
| https://github.com/OISF/suricata/security/advisories/GHSA-x8c9-8553-j9px | Vendor Advisory |
| https://redmine.openinfosecfoundation.org/issues/7613 | Permissions Required |
Configurations
History
29 May 2025, 15:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/OISF/suricata/security/advisories/GHSA-x8c9-8553-j9px - Vendor Advisory | |
| References | () https://redmine.openinfosecfoundation.org/issues/7613 - Permissions Required | |
| References | () https://github.com/OISF/suricata/commit/32d0bd2bbb4d486623dec85a94952fde2515f2f0 - Patch | |
| CPE | cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Oisf suricata
Oisf |
10 Apr 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-10 21:15
Updated : 2025-05-29 15:48
NVD link : CVE-2025-29917
Mitre link : CVE-2025-29917
JSON object : View
Products Affected
oisf
- suricata
CWE
CWE-770
Allocation of Resources Without Limits or Throttling