Suricata Hash Size Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Suricata versions prior to 7.0.9. The issue arises from the improper limitation of hash size settings in datasets declared by rules. This flaw can be exploited by untrusted rules, leading to excessive memory allocations and resource starvation.

Impact

Exploitation of this vulnerability can cause significant memory consumption, potentially leading to resource exhaustion and denial-of-service conditions.

Remediation

Users are advised to upgrade to Suricata version 7.0.9 or later.