CyberRota Analysis
AI-GeneratedSuricata versions 8.0.0 to 8.0.6 are vulnerable to a NULL pointer dereference caused by the assumption that dataset value keys resolve to strings, which can lead to crashes during startup, configuration testing, or rule reloading. This vulnerability may disrupt network monitoring and security operations, making it essential for users running affected versions to upgrade to 8.0.6 or later. Organizations relying on Suricata for network security should prioritize this update to maintain operational stability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/datasets-context-json.c assumes that a configured JSON or NDJSON dataset value_key resolves to a string. A trusted or untrusted dataset or rule feed containing a non-string value for that key can cause a NULL pointer dereference during startup, configuration test mode, or rule reload, crashing Suricata before traffic processing. This issue is fixed in version 8.0.6.
Related CVEs
Other vulnerabilities affecting the same vendor(s)