Skip to content
OpenAdvisories
High · 8.2 CVE-2026-57228 EUVD-2026-83383

Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder

Published Sep 18, 2026 · Updated Sep 21, 2026 · Assigned by GitHub_M

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split across traffic chunks and the following chunk contains exactly one byte. Crafted SMTP traffic can trigger the out-of-bounds read and crash Suricata when decode-quoted-printable MIME decoding is enabled. This issue is fixed in version 7.0.17.

Affected products

VendorProductAffectedFixed
OISF suricata >= 7.0.13, < 7.0.17 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 suricata 1:8.0.1-1 —
Debian 13 suricata No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS suricata No fix yet —
Ubuntu 22.04 LTS suricata No fix yet —
Ubuntu 18.04 LTS suricata No fix yet —
Ubuntu 16.04 LTS suricata No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed suricata 8.0.6-1.1 openSUSE-SU-2026:11308-1

Advisories 1

References