VDB
CVE-2026-22259
CVE-2026-22259
PUBLISHED
CVSS 7.5 HIGH
Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafted traffic can cause Suricata to consume large amounts of memory while parsing DNP3 traffic. This can lead to the process slowing down and running out of memory, potentially leading to it getting killed by the OOM killer. Versions 8.0.3 or 7.0.14 contain a patch. As a workaround, disable the DNP3 parser in the suricata yaml (disabled by default).
EPSS 0.52% · 42.0th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.52%
42.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| oisf | suricata | 0, 8.0.0, 0 |
| OISF | suricata | < 7.0.14, *, < 7.0.14 |
Timeline
- Jan 14, 2026 CVE Published
- Jan 14, 2026 PoC Published
- Jan 27, 2026 PoC Published
- Jan 28, 2026 EPSS Score
- Jan 30, 2026 Security Advisory
- Jan 31, 2026 EPSS Score
- Feb 2, 2026 EPSS Score
- Feb 5, 2026 EPSS Score
- Feb 8, 2026 EPSS Score
- Feb 10, 2026 EPSS Score
- Feb 13, 2026 EPSS Score
- Feb 16, 2026 EPSS Score
References
- https://github.com/OISF/suricata/commit/50cac2e2465ca211eabfa156623e585e9037bb7e fix
- https://github.com/OISF/suricata/commit/63225d5f8ef64cc65164c0bb1800730842d54942 fix
- https://redmine.openinfosecfoundation.org/issues/8181 issue
- https://github.com/OISF/suricata/security/advisories/GHSA-878h-2x6v-84q9 patch
- https://suricata.io/2026/01/13/suricata-8-0-3-and-7-0-14-released/ advisory