Memory Growth Vulnerability in Suricata Network Security Engine

CVE-2025-64334

What is CVE-2025-64334?

In certain versions of the Suricata network IDS and IPS engine, a vulnerability exists that can trigger unbounded memory growth when handling compressed HTTP data during decompression. This issue, which affects versions 8.0.0 up to but not including 8.0.2, can lead to significant resource consumption and potential system degradation. A patch has been introduced in version 8.0.2 to rectify this issue. Users are advised to either update to the patched version or implement a workaround by disabling LZMA decompression or limiting the size of response bodies.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References