PT-2025-48204 · Open Information Security Foundation+2 · Suricata+2

Published 2025-11-06 · Updated 2026-01-22 · CVE-2025-64331

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2

Description Suricata is a network IDS, IPS and NSM engine. A stack overflow can occur during large HTTP file transfers if the HTTP response body limit is increased and logging of printable HTTP bodies is enabled. The issue has been addressed in newer versions. A workaround involves using default HTTP response body limits and/or disabling http-body-printable logging, which is disabled by default.

Recommendations Update to Suricata version 7.0.13 or later. Update to Suricata version 8.0.2 or later. Use default HTTP response body limits. Disable http-body-printable logging.

Exploit

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

ALT-PU-2025-14099

BDU:2025-15197

CVE-2025-64331

GHSA-V32W-J79X-PFJ2

OPENSUSE-SU-2026:10082-1

Affected Products

Alt Linux

Debian

Suricata

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64331.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-64331 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64331 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-64331 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-64331 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-64331 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64331 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-64331 · Security Note
• https://bdu.fstec.ru/vul/2025-15197 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10082-1 · Vendor Advisory
• https://github.com/OISF/suricata/security/advisories/GHSA-v32w-j79x-pfj2 · Note
• https://suse.com/security/cve/CVE-2026-22263 · Note
• https://suse.com/security/cve/CVE-2026-22262 · Note
• https://suse.com/security/cve/CVE-2025-64333 · Note
• https://redmine.openinfosecfoundation.org/issues/8004 · Note