CVE-2025-53538

Name of the Vulnerable Software and Affected Versions Suricata versions 7.0.10 and below Suricata versions 8.0.0-beta1 through 8.0.0-rc1

Description Suricata, a network IDS, IPS, and NSM engine, is affected by an issue where mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, potentially resulting in loss of visibility.

Recommendations Suricata versions prior to 7.0.11: Disable the HTTP/2 parser. Suricata versions prior to 7.0.11: Utilize a signature like drop http2 any any -> any any (frame:http2.hdr; byte test:1,=,0,3; byte test:4,=,0,5; sid: 1;) to mitigate the issue. Suricata versions prior to 8.0.0: Disable the HTTP/2 parser. Suricata versions prior to 8.0.0: Utilize a signature like drop http2 any any -> any any (frame:http2.hdr; byte test:1,=,0,3; byte test:4,=,0,5; sid: 1;) to mitigate the issue.