Skip to content
OpenAdvisories
High · 7.5 CVE-2025-64333 EUVD-2025-199775

Suricata is vulnerable to a stack overflow from big content-type

Published Nov 26, 2025 · Updated Nov 28, 2025 · Assigned by GitHub_M

Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a large HTTP content type, when logged can cause a stack overflow crashing Suricata. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves limiting stream.reassembly.depth to less then half the stack size. Increasing the process stack size makes it less likely the bug will trigger.

Affected products

VendorProductAffectedFixed
OISF suricata < 7.0.13, < 8.0.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 suricata 1:8.0.2-1 —
Debian 13 suricata 1:7.0.10-1+deb13u2 —
ReleasePackageFixed inAdvisory
Ubuntu 25.10 suricata No fix yet —
Ubuntu 24.04 LTS suricata No fix yet —
Ubuntu 22.04 LTS suricata No fix yet —
Ubuntu 18.04 LTS suricata No fix yet —
Ubuntu 16.04 LTS suricata No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed suricata 8.0.3-1.1 openSUSE-SU-2026:10082-1
ReleasePackageFixed inAdvisory
Alpine v3.24 suricata 8.0.2-r0 —

Advisories 1

References