PT-2025-11969 · Suricata+2 · Suricata+2

Catenacyber + 1 · Published 2025-01-01 · Updated 2025-11-07 · CVE-2025-29918

Positive Technologies · (AI Summary)

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Suricata versions (affected versions not specified)

Description The issue is related to an infinite loop that can occur with negated pcre and an indefinite recursion limit setting.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Infinite Loop

Weakness Enumeration

CWE-20

CWE-835

Related Identifiers

ALT-PU-2025-14099

BDU:2025-03841

CVE-2025-29918

DLA-4103-1

GHSA-924C-VVM5-9MQX

OPENSUSE-SU-2025:15394-1

Affected Products

Alt Linux

Debian

Suricata

References · 56

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29918.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-924c-vvm5-9mqx · Vendor Advisory
• https://github.com/OISF/suricata/commit/b14c67cbdf25fa6c7ffe0d04ddf3ebe67b12b50b · Patch
• https://osv.dev/vulnerability/CVE-2025-29918 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-29918 · Security Note
• https://ubuntu.com/security/CVE-2025-29918 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-29918 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-29918 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-29918 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03841 · Security Note
• https://osv.dev/vulnerability/DLA-4103-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-29918 · Security Note
• https://github.com/OISF/suricata/commit/b14c67cbdf25fa6c7ffe0d04ddf3ebe67b12b50b%20https://github.com/OISF/suricata/commit/f6c9490e1f7b0b375c286d5313ebf3bc81a95eb6 · Note
• https://lists.debian.org/debian-lts-announce/2025/03/msg00029.html · Note