CVE-2025-64335

概要

参考情報

• OISF/suricata commit c935f08 · Patch
• OISF/suricata security advisory · Third Party Advisory
• vicarius.io/vsociety/posts/cve-2025-64335-detect-suricata-vulnerability
• vicarius.io/vsociety/posts/cve-2025-64335-mitigate-suricata-vulnerability

suricata のその他の脆弱性

• CVE-2026-94084緊急 9.4Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with …
• CVE-2026-94083緊急 9.4Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even th…
• CVE-2026-71855高 7.5Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.…
• CVE-2026-71418高 7.5Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6…
• CVE-2026-63452高 7.5Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6…