Description

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafted traffic can cause Suricata to consume large amounts of memory while parsing DNP3 traffic. This can lead to the process slowing down and running out of memory, potentially leading to it getting killed by the OOM killer. Versions 8.0.3 or 7.0.14 contain a patch. As a workaround, disable the DNP3 parser in the suricata yaml (disabled by default).

INFO

Published Date :

2026-01-27T17:13:11.057Z

Last Modified :

2026-01-27T18:16:55.422Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2026-22259 vulnerability.

Vendors Products
Oisf
  • Suricata
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-22259.

URL Resource
https://github.com/OISF/suricata/commit/50cac2e2465ca211eabfa156623e585e9037bb7e cve-icon cve-icon
https://github.com/OISF/suricata/commit/63225d5f8ef64cc65164c0bb1800730842d54942 cve-icon cve-icon
https://github.com/OISF/suricata/security/advisories/GHSA-878h-2x6v-84q9 cve-icon cve-icon
https://redmine.openinfosecfoundation.org/issues/8181 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact