Stack Overflow in Suricata Network Security Solution by OISF

CVE-2025-64332

What is CVE-2025-64332?

Suricata is an advanced network intrusion detection and prevention system developed by the Open Information Security Foundation (OISF). A stack overflow vulnerability was identified prior to versions 7.0.13 and 8.0.2, which could lead to Suricata crashing if SWF decompression is activated. While this feature is disabled by default, enabling it without appropriate configuration could compromise system stability. Users are advised to update to the latest versions to mitigate risks or adjust the 'decompress-depth' setting in the suricata.yaml file to ensure the feature's safe usage.

References