CyberRota Analysis
AI-GeneratedSuricata versions 8.0.0 to 8.0.4 are vulnerable due to inconsistent enforcement of the Lua sandbox memory limit, which may allow certain allocation patterns to exceed the configured memory limit, potentially leading to resource exhaustion or denial of service. Users with Lua rule execution enabled should prioritize this vulnerability, especially if they are utilizing affected Lua scripts or rules. Upgrading to version 8.0.5 or disabling Lua rules is recommended to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain Lua allocation patterns could exceed `security.lua.max-bytes` without triggering the intended memory limit, making the configured sandbox limit unreliable. This requires Lua rules to be enabled and an affected Lua script/rule to be loaded. Version 8.0.5 contains a fix. As a workaround, disable `security.lua.allow-rules` unless Lua rules are required.