Nixpkgs security tracker

Dismissed

Permalink CVE-2026-22263

5.3 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): LOW

updated 2 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 3 months ago
@LeSuisse dismissed 2 months, 3 weeks ago

Suricata http1: quadratic complexity in headers parsing over multiple packets

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.

References

https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7 x_refsource_CONFIRM
https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428 x_refsource_MISC
https://redmine.openinfosecfoundation.org/issues/8201 x_refsource_MISC

Affected products

suricata

==>= 8.0.0, < 8.0.3

Matching in nixpkgs

pkgs.suricata

Free and open source, mature, fast and robust network threat detection engine

nixos-unstable 7.0.10
- nixpkgs-unstable 7.0.10
- nixos-unstable-small 7.0.10

Package maintainers

@magenbluten magenbluten <magenbluten@codemonkey.cc>

Supported branches are <= 8.0

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.suricata

Package maintainers