CVE-2026-63447

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.5 through 8.0.5

Description The FTP parser in src/app-layer-ftp.c can continue allocating transactions even after the app-layer.protocols.ftp.max-tx limit is reached when processing a single large chunk of FTP command data. Following a too many transactions event, the oversized transaction list is processed with quadratic complexity. This allows specially crafted FTP traffic to degrade packet processing performance, reduce monitoring visibility, or cause a denial of service.

Recommendations Update to version 8.0.6.