PT-2025-48203 · Open Information Security Foundation+2 · Suricata+2

Published 2025-11-07 · Updated 2026-01-22 · CVE-2025-64330

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2

Description Suricata is a network IDS, IPS and NSM engine. A heap overflow can occur when logging verdict information in eve.alert and eve.drop records for versions prior to 7.0.13 and 8.0.2. This requires the per packet alert queue to be filled with alerts followed by a pass rule, potentially leading to crashes. The issue is related to a single byte read during logging. Increasing the alert queue size (packet-alert-max in suricata.yaml) can reduce the likelihood of this issue occurring.

Recommendations Update to Suricata version 7.0.13 or later. Update to Suricata version 8.0.2 or later. Increase the alert queue size (packet-alert-max) in the suricata.yaml configuration file.

Exploit

Fix

Buffer Overflow

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-119

CWE-787

CWE-122

Related Identifiers

ALT-PU-2025-14099

BDU:2025-14771

CVE-2025-64330

GHSA-83V7-GM34-F437

OPENSUSE-SU-2026:10082-1

Affected Products

Alt Linux

Debian

Suricata

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64330.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-83v7-gm34-f437 · Vendor Advisory
• https://github.com/OISF/suricata/commit/482e5eac9218d007adbe2410d6c00173368ce947 · Patch
• https://osv.dev/vulnerability/CVE-2025-64330 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14771 · Security Note
• https://ubuntu.com/security/CVE-2025-64330 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-64330 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-64330 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64330 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-64330 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-64330 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10082-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-22263 · Note
• https://suse.com/security/cve/CVE-2026-22262 · Note
• https://suse.com/security/cve/CVE-2025-64333 · Note