CVE-2025-64334 – Suricata is vulnerable to unbounded memory growth for decompression

The following table lists the changes that have been made to the
CVE-2025-64334 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Nov. 26, 2025

    Action Type Old Value New Value
    Added Description Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2. A workaround involves disabling LZMA decompression or limiting response-body-limit size.
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Added CWE CWE-770
    Added Reference https://github.com/OISF/suricata/commit/00f04daa3a44928dfdd0003cb9735469272c94a1
    Added Reference https://github.com/OISF/suricata/security/advisories/GHSA-r5jf-v2gx-gx8w
Share the Post:

Related Posts