CVE-2025-64331

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2

Description Suricata is a network IDS, IPS and NSM engine. A stack overflow can occur during large HTTP file transfers if the HTTP response body limit is increased and logging of printable HTTP bodies is enabled. The issue has been addressed in newer versions. A workaround involves using default HTTP response body limits and/or disabling http-body-printable logging, which is disabled by default.

Recommendations Update to Suricata version 7.0.13 or later. Update to Suricata version 8.0.2 or later. Use default HTTP response body limits. Disable http-body-printable logging.