Suricata HTTP Header Parsing Inefficiency Leading to Performance Degradation

A performance degradation vulnerability has been identified in Suricata, a network IDS, IPS, and NSM engine, in versions 8.0.0 prior to 8.0.3. The issue arises from an inefficiency in HTTP/1 headers parsing, which can cause a slowdown when processing multiple packets. This vulnerability has been patched in version 8.0.3.

Impact

Exploitation of this vulnerability can cause a moderate slowdown in performance when processing HTTP/1 headers over multiple packets, due to the introduction of quadratic complexity in the parsing process.

Remediation

Users are advised to upgrade to Suricata version 8.0.3, where this vulnerability has been patched.