Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2025-29917

Suricata decode_base64: signature can do large memory allocation

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The bytes setting in the decode_base64 keyword is not properly limited. Due to this, signatures using the keyword and setting can cause large memory allocations of up to 4 GiB per thread. This vulnerability is fixed in 7.0.9.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OISF suricata

  • < 7.0.9affected

References