PT-2026-4995 · Open Information Security Foundation · Suricata

Catenacyber · Publicado 2026-01-01 · Atualizado 2026-01-27 · CVE-2026-22263

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.2

Description Suricata is a network IDS, IPS and NSM engine. An inefficiency in http1 headers parsing, present in versions starting from 8.0.0 and prior to 8.0.3, can cause performance slowdown when processing multiple packets. Version 8.0.3 resolves this issue.

Recommendations Update to Suricata version 8.0.3 or later.

Exploit

Correção

Resource Exhaustion

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-1050

CWE-400

CWE-770

Identificadores relacionados

BDU:2026-00954

CVE-2026-22263

GHSA-RWC5-HXJ6-HWX7

OPENSUSE-SU-2026:10082-1

Produtos afetados

Suricata

Referências · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22263.json · Exploit
• https://github.com/OISF/suricata/commit/50cac2e2465ca211eabfa156623e585e9037bb7e%20https://github.com/OISF/suricata/commit/63225d5f8ef64cc65164c0bb1800730842d54942 · Nota
• https://github.com/OISF/suricata/security/advisories/GHSA-878h-2x6v-84q9%20https://redmine.openinfosecfoundation.org/login?back_url=https%3A%2F%2Fredmine.openinfosecfoundation.org%2Fissues%2F8181 · Nota
• https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7 · Aviso do Fabricante
• https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428 · Correção
• https://ubuntu.com/security/CVE-2026-22263 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-64333 · Nota
• https://suse.com/security/cve/CVE-2026-22259 · Nota
• https://suse.com/security/cve/CVE-2025-64334 · Nota
• https://osv.dev/vulnerability/CVE-2026-22263 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-22262 · Nota
• https://twitter.com/CVEnew/status/2016226149550956765 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-22264 · Nota
• https://cve.org/CVERecord?id=CVE-2026-22263 · Nota de Segurança
• https://suse.com/security/cve/CVE-2025-64335 · Nota