CVE catalog

CVE-2025-53538

suricata: CVE-2025-53538

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.54% · Oct 25, 2026

A denial of service flaw has been discovered in suricata. This flaw is the result of mishandling of data on HTTP2 stream 0 which can lead to uncontrolled memory usage, leading to loss of visibility. Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
DebiansuricatabookwormNot reportedvulnerable
Debiansuricata131:7.0.10-1vulnerable
Debiansuricata131:7.0.10-1+deb13u1fixed
Debiansuricata141:7.0.10-1vulnerable
Debiansuricata141:7.0.11-1~bpo13+1vulnerable
Debiansuricata141:7.0.11-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansuricatadeb131:7.0.10-1+deb13u1Not reportedDEBIAN-CVE-2025-53538Not reported
Debiansuricatadeb141:7.0.11-1Not reportedDEBIAN-CVE-2025-53538Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [suricata]Affected
    Details (2)

    • 1:7.0.10-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      dsa · suricata · debian · bookworm

    • 1:7.0.10-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      dsa · suricata · debian · bookworm

[Debian 13 (Trixie)]

  • [suricata]Fixed
    Details (4)

    • 1:7.0.10-1+deb13u4 · amd64 · trixie

      Fixed · Fixed: 1:7.0.10-1+deb13u1

      dsa · suricata · debian · 13

    • 1:7.0.10-1+deb13u4 · arm64 · trixie

      Fixed · Fixed: 1:7.0.10-1+deb13u1

      dsa · suricata · debian · 13

    • 1:8.0.6-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 1:7.0.10-1+deb13u1

      dsa · suricata · debian · 13

    • 1:8.0.6-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 1:7.0.10-1+deb13u1

      dsa · suricata · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]