CVE-2026-22259

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.3 Suricata versions prior to 7.0.14

Description Specially crafted network traffic can cause Suricata to consume excessive memory when parsing DNP3 traffic. This can lead to performance degradation and potential process termination due to out-of-memory (OOM) conditions. The issue affects Suricata when processing DNP3 traffic. As a temporary measure, disabling the DNP3 parser in the Suricata configuration file can mitigate the problem.

Recommendations Update to Suricata version 8.0.3 or later. Update to Suricata version 7.0.14 or later. As a temporary workaround, disable the DNP3 parser in the Suricata configuration file.