CVE-2025-59149

Name
CVE-2025-59149
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In version 8.0.0, rules using keyword ldap.responses.attribute_type (which is long) with transforms can lead to a stack buffer overflow during Suricata startup or during a rule reload. This issue is fixed in version 8.0.1. To workaround this issue, users can disable rules with ldap.responses.attribute_type and transforms.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
security-advisories@github.com https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018
security-advisories@github.com https://github.com/OISF/suricata/commit/38a2cba5c397002047d84645f5ab770ff88020e1
security-advisories@github.com https://github.com/OISF/suricata/security/advisories/GHSA-vxcg-38x4-gj7j
security-advisories@github.com https://redmine.openinfosecfoundation.org/issues/7861

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:oisf:suricata:8.0.0:-:*:*:*:*:*:* suricata == None == 8.0.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
suricata edge-community 8.0.0-r0 Steve McMaster <steve@mcmaster.io> possibly vulnerable
suricata 3.23-community 8.0.0-r0 Steve McMaster <steve@mcmaster.io> possibly vulnerable