[Git][security-tracker-team/security-tracker][master] 2 commits: suricata: Add infos about CVEs of 8.0.5 / 7.0.16 and 8.0.6 / 7.0.17
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Sep 11 09:25:36 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e8083a3e by Andreas Dolp at 2026-09-08T11:35:42+02:00
suricata: Add infos about CVEs of 8.0.5 / 7.0.16 and 8.0.6 / 7.0.17
- - - - -
ce4495d8 by Salvatore Bonaccorso at 2026-09-11T10:25:06+02:00
Merge remote-tracking branch 'origin/ecite/suricata-cves-202608'
Drop merged CVEs from MITRE CVE feed along to avoid duplicates.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -209,30 +209,6 @@ CVE-2026-54054 (Transmute is a free, open-source, self-hosted file conversion an
TODO: check
CVE-2026-49836 (psd-tools is a Python package for working with Adobe Photoshop PSD fil ...)
TODO: check
-CVE-2026-45770 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45769 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45768 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45767 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45766 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45765 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45764 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45762 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45761 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45759 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45752 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45751 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
CVE-2026-3096 (The product's web portals allow external links to be opened in a new b ...)
NOT-FOR-US: WSO2
CVE-2026-36392 (FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scriptin ...)
@@ -828,12 +804,6 @@ CVE-2026-4130 (There is a storage of sensitive information in cleartext vulnerab
NOT-FOR-US: National Instruments
CVE-2026-4129 (There is an improper access control vulnerability in NI SystemLink tha ...)
NOT-FOR-US: National Instruments
-CVE-2026-46387 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45763 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
-CVE-2026-45747 (Suricata is a network Intrusion Detection System, Intrusion Prevention ...)
- TODO: check
CVE-2026-42808 (An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 thr ...)
NOT-FOR-US: Bosch
CVE-2026-42807 (A heap-based buffer overflow vulnerability in the PC bridge protocol d ...)
@@ -12341,6 +12311,168 @@ CVE-2026-89156 [GHSA-2p8c-ff85-vh9x: PCRE2: out-of-bounds read in pcre2_match()
[trixie] - pcre2 <no-dsa> (Minor issue; can be fixed via point release)
NOTE: https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x
NOTE: Fixed by: https://github.com/PCRE2Project/pcre2/commit/f67db227af31bba7cdf2a7a00b97af91b588c2f5 pcre2-10.48-RC1)
+CVE-2026-57227 [mqtt: unbounded number of messages per tx]
+ - suricata 1:8.0.6-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-7h2h-hpj2-9w6p
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8672 (suricata-7.0.17)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8653 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/5cde93dea38533c9b225128ba9d54955997dc273 (suricata-7.0.17)
+ NOTE: https://github.com/OISF/suricata/commit/c03666d261256df5a2d1f5800872da8a5addf6a5 (suricata-8.0.6)
+CVE-2026-57229 [smtp: evasion due to incomplete state reset]
+ - suricata 1:8.0.6-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-ph5p-pm8r-m355
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8650 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/c0215c7e175b0000ef8450928dd1f3453c48379b (suricata-8.0.6)
+CVE-2026-57223 [windows: unquoted LocalSystem service ImagePath]
+ - suricata 1:8.0.6-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-jh8w-wf3f-58jp
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8665 (suricata-7.0.17)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8627 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/0dad38fff024b4fec9bc8144d8b94dbca39aac2e (suricata-7.0.17)
+ NOTE: https://github.com/OISF/suricata/commit/2b924d47cc51d0b7760cda3519f2c04a2f65ea38 (suricata-8.0.6)
+CVE-2026-57225 [datasets: NULL dereference on unexpected ndjson files]
+ - suricata 1:8.0.6-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-vqqx-88xw-qqvc
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8625 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/bd3293aca714f5d090b73e7d9be0e5cd7e3f5f53 (suricata-8.0.6)
+CVE-2026-57224 [dhcp: unbounded tx growth with unidirectional traffic]
+ - suricata 1:8.0.6-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-m2vc-g65c-ph7m
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8622 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/f234d155bcf43df403ee0823b60de8d02e2b99b2 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/bac8a69ca48c14582d39a244a87edad44751ebe1 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/ef035c7603293a10c5ad087e3d20b05f75236144 (suricata-8.0.6)
+CVE-2026-57226 [detect/file_data: heap buffer overflow in SWF decompression depth handling]
+ - suricata 1:8.0.6-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-p33j-r48q-3jcf
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8644 (suricata-7.0.17)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8643 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/82af0aeb7cec39e206a9ca96c4966425eddeaa74 (suricata-7.0.17)
+ NOTE: https://github.com/OISF/suricata/commit/b63224871b0f8b0b1f7b8c22d05ba8a5c5f69fbb (suricata-8.0.6)
+CVE-2026-57228 [mime: buffer over read in quoted printable decoding]
+ - suricata 1:8.0.1-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-qxm4-q7vx-7xj4
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8608 (suricata-7.0.17)
+ NOTE: https://github.com/OISF/suricata/commit/19880f9d5bbe2b8f8e8867a577848dce2b532c86 (suricata-7.0.17)
+CVE-2026-57222 [ippair: IPv4/IPv6 hash collision can reuse wrong IPPair state]
+ - suricata 1:8.0.6-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-2r8x-23fw-hgcg
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8569 (suricata-7.0.17)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8568 (suricata-8.0.6)
+ NOTE: https://github.com/OISF/suricata/commit/9d788575c5d22a34eeed50d56557ed12b05e0aec (suricata-7.0.17)
+ NOTE: https://github.com/OISF/suricata/commit/c92e270c4a795c52bce610aa1ce9ebaf065c49e6 (suricata-8.0.6)
+CVE-2026-46352 [defrag: fragmented encapsulated traffic with fragments can lead to deadlock]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-rc34-46x6-mxxm
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8561 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/519ded68fcd7c84d5d348735bba9b02036f91ef8 (suricata-8.0.5)
+CVE-2026-45770 [detect/lua: buffer overflow leads to sandbox escape]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-653j-cc95-vj4c
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8557 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/09c45d91a565642dffefeb87c7b54c4e3224db73 (suricata-8.0.5)
+CVE-2026-46387 [http2: excessive memory alloc with decompression bomb]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-45p7-j5wm-8wrx
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8555 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8554 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/16c689cbec9d424392c5547c959ad0b2d8bb8a60 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/b468bd631c5b9ddc153404b2b23abf48daf25fee (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/5c6af4419b82ce5a1f7b6e19f0a7b5b907997f78 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/69107199d6fbff979bad2174cd3a904ab8951bd6 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/20104d09788b606b1de1923286d463a07ad47e6d (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/9c24b5bf1cd3e87f3e61ab89c972fce23ca227af (suricata-8.0.5)
+CVE-2026-45767 [datasets: save with load cmd can save to absolute filename]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-gfxq-gffp-w9rv
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8548 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8547 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/477120e3409a2270e5d698c89e7dbd0a74f1f218 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/654f5fa64ffbb9ce855f178b7f45cce8ce72ce68 (suricata-8.0.5)
+CVE-2026-45752 [detect: use-after-free in decompress transform pipeline]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-qmc9-vqq2-8mv3
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8541 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/11d1fe1ca866d82e8bb3dd4493016188d890aebd (suricata-8.0.5)
+CVE-2026-45751 [detect: heap-use-after-free in inspection-buffer transform chaining]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-59q6-j4w8-8pjx
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8542 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8540 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/89cde65f8d4314b007c723843b79dfa9e5e26e88 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/3d371fff99d7d0af0912543174c6ea2abb0ff6a3 (suricata-8.0.5)
+CVE-2026-45759 [http1: quadratic complexity with usage of HTTPParseContentDispositionHeader]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-cfq5-g2v5-6652
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8531 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8530 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/a41b135c5c054c806346f8d6e02d67b8f5594be0 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/8abe0f2a8de0d910d4d4461474f5bfb519877053 (suricata-8.0.5)
+CVE-2026-45761 [detect: case insensitivity in frames lead to buffer overflow]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-r74x-74x5-r9vm
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8528 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8527 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/df3336bf4f8e8034570b1608f87065391d79c022 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/31d3977720990bb0efd20be08a6c2362287ea460 (suricata-8.0.5)
+CVE-2026-45762 [defrag: incorrect ip fragment reuse causes remote crash]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-gv2j-f6jv-3878
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8512 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8511 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/b8ae15e2a049fac8714a6f37be3171a7376a4255 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/97d6fa9e1467f6e6957f32b034199c51980e2ffd (suricata-8.0.5)
+CVE-2026-45763 [lua: sandbox alloc_limit not enforced on new allocations]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-9h43-frr8-xx6m
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8508 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/3e064d47964982a93e5facb9b8700f32d869e139 (suricata-8.0.5)
+CVE-2026-45764 [http2: type confusion from protocol change]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-5rvq-72r5-rqhr
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8494 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8493 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/61c4df2821441226a2e0d3a5723f44ba95764cdd (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/75a4641af6ee87a605e10557e6e2417330227a6a (suricata-8.0.5)
+CVE-2026-45765 [dnp3: unbounded reassembly]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-m8x4-c78g-r4vj
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8462 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8461 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/8c807a86c9335de2434c675787e3fab8f5b114d2 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/71210ab1a841b2697047236b873643b51b03558f (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/a1de91bf92e8adc1db4d55641c0b2ce2beecc2e4 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/2a4947f0c0791b38b951b4140cb49bb814945045 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/d869f782f737515a0c406bbb86a91d5ff626f3e1 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/d62b7cd98054ab03156e7ce2cac15166b46ab391 (suricata-8.0.5)
+CVE-2026-45766 [nfs: OOM on stateful structures]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-jqr4-ch38-wvm6
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8420 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8419 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/6c63fec9cb1f7333132951240da3f3e9f0194cb9 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/cc59c567f7f23ddf1bb03e3b09f88928bc80da6a (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/40aede627e215d033ba2fe10ffa020053fc9aeb0 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/f43d442251ab96adcc0bfece6919832b1dc8e9be (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/af37786ee48e0f53a3b29d6c9776f33cee9c67f9 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/c029c0958537224ef85f008a578265b52803021d (suricata-8.0.5)
+CVE-2026-45769 [ikev2: OOM due to unbounded client_transforms]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-hg2g-r464-5593
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8417 (suricata-7.0.16)
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8416 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/97251495e674836693c4636f1eb95fc10b191c15 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/3a6414eb6ae2b2368df51de50e1c1c980109c7a6 (suricata-8.0.5)
+CVE-2026-45768 [ldap: OOM on unbounded responses per tx]
+ - suricata 1:8.0.5-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-cr4x-w4c4-57p7
+ NOTE: https://redmine.openinfosecfoundation.org/issues/8406 (suricata-8.0.5)
+ NOTE: https://github.com/OISF/suricata/commit/82cf3d67b1f9fe963c372303ae36551146fee890 (suricata-8.0.5)
+CVE-2026-45747 [lua/tls: null dereference in GetCertInfo]
+ - suricata 1:8.0.1-1
+ NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-vfc5-9844-rmhv
+ NOTE: https://redmine.openinfosecfoundation.org/issues/6286 (suricata-7.0.16)
+ NOTE: https://github.com/OISF/suricata/commit/20fa5d773fd8ccebaa58294f59fb6cd50f55c4d5 (suricata-7.0.16)
CVE-2026-19873 (HTML::FormFu versions through 2.08 for Perl allow resource exhaustion ...)
- libhtml-formfu-perl 2.07000-3 (bug #1146310)
[trixie] - libhtml-formfu-perl <no-dsa> (Minor issue)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3e8ce0c813d701afb602a608595bd64b198ec2e5...ce4495d8a2410651b7b9f1d604163c4b49eaec10
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3e8ce0c813d701afb602a608595bd64b198ec2e5...ce4495d8a2410651b7b9f1d604163c4b49eaec10
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260911/2d81355a/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list