CVE-2026-63448Patch(oisf / suricata)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch oisf suricata systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, because cleanup waits for inspection in the unseen direction. The transaction creation paths in rust/src/smb can exceed the intended SMB_MAX_TX bound, and cleanup repeatedly scans the growing list. Sustained one-directional SMB traffic can therefore cause unbounded per-flow state and CPU and memory exhaustion. This issue is fixed in versions 8.0.6 and 7.0.17.

oisf CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Vendor / third-party advisories

https://github.com/OISF/suricata/security/advisories/GHSA-hvvj-c8xx-9g35

Other references

Weakness type (CWE)

CWE-400CWE-401CWE-407

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

suricata

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

oisf

Products

suricata

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-63448

Full discourse1 post

CVE@CVEnew45d
Patch
CVE-2026-63448 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can re… https://www.cve.org/CVERecord?id=CVE-2026-63448
Post summary
The text announces CVE-2026-63448 in Suricata's SMB parser and points to fixed versions (7.0.17 / 8.0.6), making remediation the primary takeaway. No PoC, exploit tool, or active exploitation is mentioned.
010101.2K
58.1K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	oisf	suricata	-	-	-

Explore more

Back to dashboard oisf CVEs suricata vulnerabilities