CVE-2026-31932

Suricata krb5: quadratic complexity in krb5 buffering

State: Published
Severity: 7.5 High
Published: Apr 2, 2026
Updated: Apr 2, 2026
Reserved: Mar 10, 2026

Description

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	GitHub_M

Weaknesses

CWE-407 Inefficient Algorithmic Complexity

Affected Products

Product	Versions
suricataOISF	< 7.0.15Affected >= 8.0.0, < 8.0.4Affected

References

https://github.com/OISF/suricata/security/advisories/GHSA-rp9m-jcpw-hggr
https://redmine.openinfosecfoundation.org/issues/8305

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.