Memory Growth Vulnerability in Suricata Network Security Engine

CVE-2025-64334

What is CVE-2025-64334?

In certain versions of the Suricata network IDS and IPS engine, a vulnerability exists that can trigger unbounded memory growth when handling compressed HTTP data during decompression. This issue, which affects versions 8.0.0 up to but not including 8.0.2, can lead to significant resource consumption and potential system degradation. A patch has been introduced in version 8.0.2 to rectify this issue. Users are advised to either update to the patched version or implement a workaround by disabling LZMA decompression or limiting the size of response bodies.

References