Cyber ·
Multiple vulnerabilities in Suricata before version 8.0.8
Suricata 8.0.8 fixes high-severity flaws that can cause CPU or memory exhaustion and crashes. The advisory was posted to the oss-sec list on 29 October and lists five high-severity items with project issue numbers.
According to the advisory relayed by the oss-sec feed, Suricata 8.0.8 was released to fix several vulnerabilities. The text is an automatic translation of a post by Victor Julien dated 29 October, and the feed item is dated 30 October 2026. High-severity items include: in the tftp module, unlimited retention of transactions can cause CPU exhaustion (Issue 9085); in the sip module, quadratic complexity when processing TCP headers (Issue 9101); in http2, brotli decoders across many streams can exhaust memory (Issue 9104); in doh2, type confusion in xbits track-tx can crash Suricata (Issue 9133); and another http2 item about the header inspection buffer, whose description is truncated in the source. Because the received text is incomplete, the full list of fixes and the exact affected version ranges cannot be confirmed here. To verify, consult the original post in the public oss-sec list archive, then the Suricata project release notes and issue tracker, confirming which versions are affected and the fix listed for each number.
Original source: Múltiplas vulnerabilidades no Suricata antes da versão 8.0.8