Approved changes feed: RSS · Atom

cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*

part: a version: 8.0.0 update: *

VendorOisf (cd5e037f-1562-515c-af4f-7fdde1a9512b)
ProductSuricata (4997bdfc-e075-545a-b5bf-6c424b0d2e55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59150 vulnerable 2026-06-08 07:35:20.056474 Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref
HIGH (7.5)
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword.
Published: 2025-10-01T20:23:54.207Z
Updated: 2025-10-23T13:12:27.248Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.