CyberRota Analysis
AI-GeneratedSuricata's DNP3 reassembly feature is vulnerable to a buffer overflow due to insufficient parser-level bounds, which can lead to excessive memory consumption and potential denial of service. Organizations utilizing Suricata versions prior to 7.0.16 and 8.0.5 should prioritize patching or disabling DNP3 if not in use to mitigate this risk. This vulnerability poses a significant threat to network security monitoring and intrusion prevention systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could buffer data without sufficient parser-level bounds. Crafted DNP3 traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable DNP3 (which is not enabled by default) if it is not needed, and/or define a limited `stream.reassembly.depth` (0 or absent is unlimited).