CVE-2026-31935
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Apr 2, 2026
CISA due date
—
The record
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | suricata | 0 | 8.0.4-1.1 |
Related vulnerabilities
- CVE-2026-31934 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31937 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31931 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31932 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31933 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion Also affects suricata
- CVE-2026-22263 Suricata http1: quadratic complexity in headers parsing over multiple packets Also affects suricata
- CVE-2026-22262 Suricata datasets: stack overflow when saving a set Also affects suricata