Stack Overflow Risk in Suricata Network Engine by Open Information Security Foundation

CVE-2025-64333

What is CVE-2025-64333?

A vulnerability has been identified in the Suricata network intrusion detection and prevention system, where processing a large HTTP content type can trigger a stack overflow. This effect can lead to the unexpected crashing of the Suricata engine. Users of Suricata versions prior to 7.0.13 and 8.0.2 are particularly affected. To mitigate the risk, it is recommended to limit the 'stream.reassembly.depth' setting to less than half of the stack size, and consider increasing the stack size to reduce the likelihood of triggering this issue. The vulnerability has been addressed in the updated versions.

References