CVE-2026-31934
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Apr 2, 2026
CISA due date
—
The record
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | suricata | 0 | 8.0.4-1.1 |
Related vulnerabilities
- CVE-2026-31937 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31935 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31931 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31932 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31933 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion Also affects suricata
- CVE-2026-22263 Suricata http1: quadratic complexity in headers parsing over multiple packets Also affects suricata
- CVE-2026-22262 Suricata datasets: stack overflow when saving a set Also affects suricata