PT-2025-11968 · Suricata+2 · Suricata+2

Victorjulien · Publicado 2025-01-01 · Atualizado 2025-11-07 · CVE-2025-29917

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Suricata versions (affected versions not specified)

Description The issue concerns a problem where the decode base64 signature can cause large memory allocation. This could potentially lead to issues with the Suricata package in Debian Linux.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-20

CWE-770

Identificadores relacionados

ALT-PU-2025-14099

BDU:2025-03842

CVE-2025-29917

GHSA-X8C9-8553-J9PX

OPENSUSE-SU-2025:15394-1

Produtos afetados

Alt Linux

Debian

Suricata

Referências · 52

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29917.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-x8c9-8553-j9px · Aviso do Fabricante
• https://github.com/OISF/suricata/commit/32d0bd2bbb4d486623dec85a94952fde2515f2f0 · Correção
• https://github.com/OISF/suricata/commit/bab716776ba3561cfbfd1a57fc18ff1f6859f019 · Nota
• https://suse.com/security/cve/CVE-2024-55626 · Nota
• https://twitter.com/CVEnew/status/1910445205272019042 · Publicação no Twitter
• https://security-tracker.debian.org/tracker/CVE-2025-29917 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-32664 · Nota
• https://suse.com/security/cve/CVE-2019-10053 · Nota
• https://suse.com/security/cve/CVE-2024-24568 · Nota
• https://osv.dev/vulnerability/CVE-2025-29917 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-32663 · Nota
• https://ubuntu.com/security/CVE-2025-29917 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-55629 · Nota
• https://suse.com/security/cve/CVE-2024-23835 · Nota