PT-2025-11968 · Suricata+2 · Suricata+2

Victorjulien · Published 2025-01-01 · Updated 2025-11-07 · CVE-2025-29917

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Suricata versions (affected versions not specified)

Description The issue concerns a problem where the decode base64 signature can cause large memory allocation. This could potentially lead to issues with the Suricata package in Debian Linux.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Allocation of Resources Without Limits

Weakness Enumeration

CWE-20

CWE-770

Related Identifiers

ALT-PU-2025-14099

BDU:2025-03842

CVE-2025-29917

GHSA-X8C9-8553-J9PX

OPENSUSE-SU-2025:15394-1

Affected Products

Alt Linux

Debian

Suricata

References · 52

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29917.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-x8c9-8553-j9px · Vendor Advisory
• https://github.com/OISF/suricata/commit/32d0bd2bbb4d486623dec85a94952fde2515f2f0 · Patch
• https://security-tracker.debian.org/tracker/CVE-2025-29917 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-29917 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-29917 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-29917 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-29917 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-29917 · Security Note
• https://bdu.fstec.ru/vul/2025-03842 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-29917 · Vendor Advisory
• https://github.com/OISF/suricata/commit/bab716776ba3561cfbfd1a57fc18ff1f6859f019 · Note
• https://suse.com/security/cve/CVE-2024-55626 · Note
• https://twitter.com/CVEnew/status/1910445205272019042 · Twitter Post