CVE-2026-31933

Suricata stream: quadratic complexity in stream inspection

State: Published
Severity: 7.5 High
Published: Apr 2, 2026
Updated: Apr 3, 2026
Reserved: Mar 10, 2026

Description

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	GitHub_M

Weaknesses

CWE-407 Inefficient Algorithmic Complexity

Affected Products

Product	Versions
suricataOISF	< 7.0.15Affected >= 8.0.0, < 8.0.4Affected

References

https://github.com/OISF/suricata/security/advisories/GHSA-hvp5-gpr6-j4gp
https://redmine.openinfosecfoundation.org/issues/8272

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.