Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🚨 HIGH Severity: CVE-2025-59150 (CVSS 7.5) Suricata 8.0.0 IDS/IPS segmentation fault via NULL byte in TLS subjectaltname. Fix: Update to v8.0.1 Workaround: Disable tls.subjectaltname rules #CVE #Vulnerability #PatchNow https://t.co/tlrIoAVb20
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oisf | suricata | 8.0.0 | - | - |