CVE-2025-59148

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 and earlier

Description Suricata, a network IDS, IPS and NSM engine, experiences an issue where it incorrectly handles the entropy keyword when not anchored to a "sticky" buffer. This can result in a segmentation fault. As a workaround, users can disable rules utilizing the entropy keyword or ensure they are anchored to a sticky buffer.

Recommendations Update to version 8.0.1 or later. Disable rules using the entropy keyword. Validate that rules using the entropy keyword are anchored to a sticky buffer.