Memory Allocation Vulnerability in Suricata Network Security Monitoring Engine
CVE-2025-29917

6.2MEDIUM

Key Information:

Vendor

Oisf

Status
Suricata
Vendor
CVE Published:
10 April 2025

What is CVE-2025-29917?

Suricata, a robust network Intrusion Detection System (IDS) and Intrusion Prevention System (IPS), has a vulnerability that occurs due to inadequate limits on the bytes setting in the decode_base64 keyword. This oversight can lead to substantial memory allocations of up to 4 GiB per thread, significantly impacting system performance and stability. Users are advised to update to version 7.0.9 or later to mitigate this issue.

Affected Version(s)

suricata < 7.0.9

References

https://github.com/OISF/suricata/security/advisories/GHSA...
x_refsource_CONFIRM
https://github.com/OISF/suricata/commit/32d0bd2bbb4d48662...
x_refsource_MISC
https://redmine.openinfosecfoundation.org/issues/7613
x_refsource_MISC

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-29917 : Memory Allocation Vulnerability in Suricata Network Security Monitoring Engine