PT-2025-38266 · Open Source+2 · Suricata+2

Amirabell · Published 2025-09-16 · Updated 2026-03-10 · CVE-2025-59147

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Suricata versions 7.0.11 and below Suricata version 8.0.0

Description Suricata, a network IDS, IPS and NSM engine, experiences a detection bypass when receiving crafted traffic containing multiple SYN packets with differing sequence numbers within the same flow tuple. This can result in Suricata failing to establish the TCP session. In Intrusion Detection System (IDS) mode, this leads to a bypass of detection and logging. In Intrusion Prevention System (IPS) mode, the flow is blocked.

Recommendations Update to Suricata version 7.0.12 or later. Update to Suricata version 8.0.1 or later.

Exploit

Fix

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

ALT-PU-2025-14099

BDU:2025-12460

CVE-2025-59147

GHSA-V8HV-6V7X-4C2R

OPENSUSE-SU-2025:15592-1

Affected Products

Alt Linux

Debian

Suricata

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59147.json · Exploit
• https://github.com/OISF/suricata/commit/e91b03c90385db15e21cf1a0e85b921bf92b039e · Patch
• https://github.com/OISF/suricata/commit/be6315dba0d9101b11d16e9dacfe2822b3792f1b · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2025:15592-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-59147 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59147 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-59147 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12460 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-59147 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-59147 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-59147 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-59147 · Vendor Advisory
• https://github.com/OISF/suricata/security/advisories/GHSA-v8hv-6v7x-4c2r · Note
• https://abf.rosa.ru/advisories/ROSA-SA-2026-3126 · Note
• https://twitter.com/CVEnew/status/1973475667980218494 · Twitter Post