PT-2026-4983 · Open Information Security Foundation · Suricata

Marckwei · Published 2026-01-01 · Updated 2026-01-27 · CVE-2026-22259

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.3 Suricata versions prior to 7.0.14

Description Specially crafted network traffic can cause Suricata to consume excessive memory when parsing DNP3 traffic. This can lead to performance degradation and potential process termination due to out-of-memory (OOM) conditions. The issue affects Suricata when processing DNP3 traffic. As a temporary measure, disabling the DNP3 parser in the Suricata configuration file can mitigate the problem.

Recommendations Update to Suricata version 8.0.3 or later. Update to Suricata version 7.0.14 or later. As a temporary workaround, disable the DNP3 parser in the Suricata configuration file.

Exploit

Fix

Allocation of Resources Without Limits

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-400

Related Identifiers

BDU:2026-00953

CVE-2026-22259

GHSA-878H-2X6V-84Q9

OPENSUSE-SU-2026:10082-1

Affected Products

Suricata

References · 35

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22259.json · Exploit
• https://github.com/OISF/suricata/commit/63225d5f8ef64cc65164c0bb1800730842d54942 · Patch
• https://github.com/OISF/suricata/security/advisories/GHSA-878h-2x6v-84q9 · Vendor Advisory
• https://github.com/OISF/suricata/commit/50cac2e2465ca211eabfa156623e585e9037bb7e · Patch
• https://safe-surf.ru/specialists/bulletins-nkcki/729140 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22259 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-22259 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22259 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10082-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-22259 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-22259 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-22259 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00953 · Security Note
• https://ubuntu.com/security/CVE-2026-22259 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-22262 · Note