CVE-2025-64331

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2025-64331

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-64331.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2025-64331

Aliases

GHSA-v32w-j79x-pfj2

Downstream

DEBIAN-CVE-2025-64331

UBUNTU-CVE-2025-64331

Published

2025-11-26T23:00:40.264Z

Modified

2025-12-11T10:59:48.579930Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Suricata is vulnerable to a stack overflow on large file transfers with http-body-printable

Details

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow can occur on large HTTP file transfers if the user has increased the HTTP response body limit and enabled the logging of printable http bodies. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves using default HTTP response body limits and/or disabling http-body-printable logging; body logging is disabled by default.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64331.json",
    "cwe_ids": [
        "CWE-121"
    ],
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/oisf/suricata

Affected ranges

Type: GIT
Repo: https://github.com/oisf/suricata
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

79db7b1ad444c76530c6eac8702c5e01b7c24a56

Affected versions

suricata-0.*

suricata-0.8.2

suricata-1.*

suricata-1.0.0

suricata-1.0.1

suricata-1.0.2

suricata-1.1

suricata-1.1beta1

suricata-1.1beta2

suricata-1.1beta3

suricata-1.1rc1

suricata-1.2

suricata-1.2.1

suricata-1.2beta1

suricata-1.2rc1

suricata-1.3

suricata-1.3.1

suricata-1.3beta1

suricata-1.3beta2

suricata-1.3rc1

suricata-1.4

suricata-1.4beta1

suricata-1.4beta2

suricata-1.4beta3

suricata-1.4rc1

suricata-2.*

suricata-2.0

suricata-2.0.1

suricata-2.0.1rc1

suricata-2.0.2

suricata-2.0beta1

suricata-2.0beta2

suricata-2.0rc1

suricata-2.0rc2

suricata-2.0rc3

suricata-2.1beta1

suricata-2.1beta2

suricata-2.1beta3

suricata-2.1beta4

suricata-3.*

suricata-3.0

suricata-3.0.1

suricata-3.0.1RC1

suricata-3.0RC1

suricata-3.0RC2

suricata-3.0RC3

suricata-3.1

suricata-3.1.1

suricata-3.1.2

suricata-3.1RC1

suricata-3.2

suricata-3.2.1

suricata-3.2RC1

suricata-3.2beta1

suricata-4.*

suricata-4.0.0

suricata-4.0.0-beta1

suricata-4.0.0-rc1

suricata-4.0.0-rc2

suricata-4.0.1

suricata-4.1.0

suricata-4.1.0-beta1

suricata-4.1.0-rc1

suricata-4.1.0-rc2

suricata-4.1.1

suricata-4.1.2

suricata-5.*

suricata-5.0.0

suricata-5.0.0-beta1

suricata-5.0.0-rc1

suricata-5.0.1

suricata-6.*

suricata-6.0.0

suricata-6.0.0-beta1

suricata-6.0.0-rc1

suricata-6.0.1

suricata-7.*

suricata-7.0.0

suricata-7.0.0-beta1

suricata-7.0.0-rc1

suricata-7.0.0-rc2

suricata-7.0.1

suricata-7.0.2

suricata-8.*

suricata-8.0.0

suricata-8.0.0-beta1

suricata-8.0.0-rc1

suricata-8.0.1