CVE-2025-59150

Name
CVE-2025-59150
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018
MISC https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d
CONFIRM https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3
MISC https://redmine.openinfosecfoundation.org/issues/7881
af854a3a-2127-422b-91ae-364da2661108 https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script
af854a3a-2127-422b-91ae-364da2661108 https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script

Match rules

CPE URI Source package Min version Max version
suricata >= 8.0.0 < 8.0.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
suricata edge-community 8.0.0-r0 Steve McMaster <steve@mcmaster.io> possibly vulnerable
suricata 3.23-community 8.0.0-r0 Steve McMaster <steve@mcmaster.io> possibly vulnerable