PT-2025-48206 · Open Information Security Foundation+2 · Suricata+2

Published 2025-11-06 · Updated 2026-01-22 · CVE-2025-64333

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2

Description Suricata is a network IDS, IPS and NSM engine. A large HTTP content type, when logged, can cause a stack overflow, potentially crashing Suricata.

Recommendations Update to Suricata version 7.0.13 or later. Update to Suricata version 8.0.2 or later. As a workaround, limit stream.reassembly.depth to less than half the stack size. Increase the process stack size to reduce the likelihood of the issue triggering.

Exploit

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

ALT-PU-2025-14099

BDU:2025-15195

CVE-2025-64333

GHSA-537H-XXMX-V87M

OPENSUSE-SU-2026:10082-1

Affected Products

Alt Linux

Debian

Suricata

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64333.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-537h-xxmx-v87m · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-64333 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15195 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-64333 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-64333 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-64333 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10082-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64333 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-64333 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-22263 · Note
• https://suse.com/security/cve/CVE-2026-22262 · Note
• https://suse.com/security/cve/CVE-2025-64333 · Note
• https://suse.com/security/cve/CVE-2025-64344 · Note