Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-31934

Suricata smtp/mine: quadratic complexity in extracting urls

Description

Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OISF suricata

  • >= 8.0.0, < 8.0.4affected

References