CVE-2026-71855

概要

参考情報

• OISF/suricata commit 181b3b2 · Patch
• OISF/suricata commit 4e2f23d · Patch
• OISF/suricata commit bc41dcc · Patch
• OISF/suricata release suricata-7.0.17 · Release Notes
• OISF/suricata release suricata-8.0.6 · Release Notes
• OISF/suricata security advisory · Vendor Advisory
• redmine.openinfosecfoundation.org/issues/8558 · Permissions Required

suricata のその他の脆弱性

• CVE-2026-94084緊急 9.4Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with …
• CVE-2026-94083緊急 9.4Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even th…
• CVE-2026-71418高 7.5Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6…
• CVE-2026-63452高 7.5Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6…
• CVE-2026-63451中 5.5Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6…