Stack Overflow Risk in Suricata Network Engine by Open Information Security Foundation

CVE-2025-64333

What is CVE-2025-64333?

A vulnerability has been identified in the Suricata network intrusion detection and prevention system, where processing a large HTTP content type can trigger a stack overflow. This effect can lead to the unexpected crashing of the Suricata engine. Users of Suricata versions prior to 7.0.13 and 8.0.2 are particularly affected. To mitigate the risk, it is recommended to limit the 'stream.reassembly.depth' setting to less than half of the stack size, and consider increasing the stack size to reduce the likelihood of triggering this issue. The vulnerability has been addressed in the updated versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References