Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a large HTTP content type, when logged can cause a stack overflow crashing Suricata. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves limiting stream.reassembly.depth to less then half the stack size. Increasing the process stack size makes it less likely the bug will trigger.

INFO

Published Date :

2025-11-26T22:57:02.640Z

Last Modified :

2025-11-28T16:29:09.993Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-64333 vulnerability.

Vendors Products
Oisf
  • Suricata
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-64333.

URL Resource
https://github.com/OISF/suricata/security/advisories/GHSA-537h-xxmx-v87m cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-64333 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-64333 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact