CVE-2025-29915 – Suricata AF_PACKET Truncated Packet Vulnerability

The following table lists the changes that have been made to the
CVE-2025-29915 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Apr. 10, 2025

    Action Type Old Value New Value
    Added Description Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The AF_PACKET defrag option is enabled by default and allows AF_PACKET to re-assemble fragmented packets before reaching Suricata. However the default packet size in Suricata is based on the network interface MTU which leads to Suricata seeing truncated packets. Upgrade to Suricata 7.0.9, which uses better defaults and adds warnings for user configurations that may lead to issues.
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    Added CWE CWE-347
    Added Reference https://github.com/OISF/suricata/commit/d78f2c9a4e2b59f44daeddff098915084493d08d
    Added Reference https://github.com/OISF/suricata/security/advisories/GHSA-7m5c-cqx4-x8mp
    Added Reference https://redmine.openinfosecfoundation.org/issues/5373
Share the Post:

Related Posts