CVE-2026-22258
High · 7.5CVSS
7.5
EPSS
0.6%
Published
Jan 27, 2026
CISA due date
—
The record
Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | suricata | 0 | 8.0.3-1.1 |
Related vulnerabilities
- CVE-2026-31934 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31937 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31935 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31931 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31932 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31933 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion Also affects suricata
- CVE-2026-22263 Suricata http1: quadratic complexity in headers parsing over multiple packets Also affects suricata