Memory Consumption Vulnerability in Suricata Network Security Monitoring Engine

CVE-2026-45768

What is CVE-2026-45768?

Suricata, a popular network Intrusion Detection and Prevention System, is susceptible to a memory consumption vulnerability in its LDAP transaction processing. Versions prior to 8.0.5 allow an unbounded number of LDAP responses to be stored, which can lead to excessive memory usage when processing crafted UDP traffic. This vulnerability has the potential to cause a denial of service condition, hindering the system's operational capacity. Users are advised to upgrade to version 8.0.5, where the issue has been resolved. As a precautionary measure, disabling LDAP application-layer parsing in scenarios where it is not required can help mitigate risks. Additionally, implementing rules to limit the response counts can further strengthen defenses against this issue.

References