CyberRota Analysis
AI-GeneratedSuricata versions 8.0.0 to 8.0.4 are vulnerable due to a deadlock issue in the IP defragmentation code when handling fragmented traffic with encapsulated tunnel protocols. This vulnerability can lead to service disruptions, impacting network security monitoring and intrusion prevention capabilities. Organizations using affected Suricata versions should prioritize upgrading to version 8.0.5 to mitigate potential downtime and security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protocol whose payload is itself fragmented. Version 8.0.5 contains a fix. No known workarounds are available.
Related CVEs
Other vulnerabilities affecting the same vendor(s)