Network Intrusion Detection System Vulnerability in Suricata by Open Information Security Foundation

CVE-2026-57228

What is CVE-2026-57228?

Suricata, a network Intrusion Detection and Prevention System, has a vulnerability in its SMTP MIME quoted-printable decoder that can lead to an out-of-bounds read. This occurs when a quoted-printable escape sequence is fragmented across traffic chunks, causing the decoder to read past the intended buffer. Maliciously crafted SMTP traffic can exploit this flaw, resulting in crashes of the Suricata engine when MIME decoding is enabled. The issue affects versions 7.0.13 through 7.0.16 and is resolved in version 7.0.17.

References