Denial of Service Vulnerability in Suricata Network Security Engine

CVE-2026-45759

What is CVE-2026-45759?

Suricata, a leading network Intrusion Detection System and prevention engine, is susceptible to a Denial of Service attack due to inefficient handling of oversized HTTP 'Content-Disposition' headers during response body processing. Attackers can exploit this vulnerability by sending specially crafted HTTP traffic, resulting in excessive CPU usage and rendering the system unresponsive. To mitigate this issue, users are advised to update to versions 7.0.16 or 8.0.5, which include patches. Alternatively, a temporary workaround involves implementing a specific alert rule to prevent excessive header processing.

References