Suricata Stack Overflow Vulnerability Leading to Denial-of-Service

A stack overflow vulnerability has been identified in Suricata, a network IDS, IPS, and NSM engine, affecting versions 8.0.0 prior to 8.0.3. This vulnerability can cause Suricata to crash, creating a denial-of-service condition. The issue arises from poorly bounded recursion in the decompression process, which can be exploited to overflow the stack and cause a crash.

Impact

Exploitation of this vulnerability leads to a stack overflow, causing Suricata to crash and creating a denial-of-service condition.

Remediation

Users can upgrade to Suricata version 8.0.3, which patches this vulnerability. As an alternative, the default values for 'request-body-limit' and 'response-body-limit' can be used to mitigate the issue.