CVE-2026-57227

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted MQTT traffic can grow transaction state indefinitely, consuming CPU and memory and causing slowdown or denial of service. This issue is fixed in versions 8.0.6 and 7.0.17.

Traduire en français

Produits concernés

• OISF suricata

Scores CVSS

Faiblesses (CWE)

• CWE-400
• CWE-770

Références

• https://github.com/OISF/suricata/commit/03ba8a71d827dd36a0ceb512f45d2f440f260a3a Patch
• https://github.com/OISF/suricata/commit/5cde93dea38533c9b225128ba9d54955997dc273 Patch
• https://github.com/OISF/suricata/commit/c03666d261256df5a2d1f5800872da8a5addf6a5 Patch
• https://github.com/OISF/suricata/releases/tag/suricata-7.0.17 Release Notes
• https://github.com/OISF/suricata/releases/tag/suricata-8.0.6 Release Notes
• https://github.com/OISF/suricata/security/advisories/GHSA-7h2h-hpj2-9w6p MitigationVendor Advisory
• https://redmine.openinfosecfoundation.org/issues/8525 Permissions Required

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories