Suricata Stack Overflow Vulnerability in Transform Functions Prior to 7.0.8

A stack overflow vulnerability has been identified in Suricata, a network intrusion detection and prevention system, prior to version 7.0.8. This vulnerability arises from a large input buffer to various transform functions, including to_lowercase, to_uppercase, strip_whitespace, compress_whitespace, dotprefix, header_lowercase, strip_pseudo_headers, url_decode, and xor. The overflow can cause Suricata to crash.

Impact

Exploitation of this vulnerability leads to a stack overflow, causing Suricata to crash.

Remediation

Users can upgrade to Suricata version 7.0.8 or later to address this vulnerability. Additionally, it is recommended to avoid using the affected transform functions on 'file.data' sticky buffers.