Suricata DCERPC Buffering Inefficiency Leading to Performance Degradation Vulnerability

A performance degradation vulnerability has been identified in Suricata, a network IDS, IPS, and NSM engine, prior to version 7.0.15. The issue arises from an inefficiency in DCERPC buffering, which can cause a significant processing cost and reduce the application's availability.

Impact

Exploitation of this vulnerability causes high processing costs, leading to a notable reduction in the application's availability.

Remediation

Users can upgrade to Suricata version 7.0.15 or 8 to address this vulnerability. Alternatively, the 'dcerpc' parser can be disabled as a temporary workaround.