Zetlyn
GitHubGet started

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versi…

cve CVE-2025-59150 1 source, 1 claim · Watch

NVD writes:
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword. the claim
Severity
HIGH NVD
CVSS
7.5 NVD
Vendor
OISF NVD
Product
suricata NVD
CWE
CWE-476 NVD

How far exploitation has got

  1. No public code known
  2. Proof of concept
  3. Proof of concept, verified
  4. A Metasploit module
  5. Exploited in the wild
  6. Used in ransomware campaigns

Timeline

2025-10-01first spoke of it: Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword.NVD

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword.

What it is to other things

affectsoisf/suricata
NVD
made_byoisf
NVD
Every value, with what each source said and its receipt
PropertySourceSaidMeans here
Automatable
automatable
NVDyes
An attacker can reliably run all of the kill chain's first four steps without a person.
receipt
Source
NVD
Its words
yes
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCyes
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS
cvss
NVD7.5
receipt
Source
NVD
Its words
7.5
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS vector
cvss_vector
NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
receipt
Source
NVD
Its words
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CWE
cwe
NVDCWE-476
receipt
Source
NVD
Its words
CWE-476
Read by
field:cve.weaknesses[].description[].value
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCWE-476
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Exploitation
exploitation
NVDnone
No evidence of exploitation, and no public proof of concept.
receipt
Source
NVD
Its words
none
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCnone
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Product
product
NVDsuricata
receipt
Source
NVD
Its words
suricata
Read by
field:cve.affected[].affectedData[].product
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Severity
severity
NVDHIGH
From 7.0 to 8.9.
receipt
Source
NVD
Its words
HIGH
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCHIGH
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
high
Status
status
NVDModified
receipt
Source
NVD
Its words
Modified
Read by
field:cve.vulnStatus
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Technical impact
technical_impact
NVDpartial
The attacker gains limited control, or limited information.
receipt
Source
NVD
Its words
partial
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCpartial
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Vendor
vendor
NVDOISF
receipt
Source
NVD
Its words
OISF
Read by
field:cve.affected[].affectedData[].vendor
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "suricata",
            "vendor": "OISF",
            "versions": [
              {
                "status": "affected",
                "version": ">= 8.0.0, < 8.0.1"
              }
            ]
          }
        ],
        "source": "security-advisories@github.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:oisf:suricata:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "BF8EAB1D-119D-4387-9539-9E80D226427C",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword."
      },
      {
        "lang": "es",
        "value": "Suricata es un motor de red IDS, IPS y NSM desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. El uso de la palabra clave tls.subjectaltname en la versión 8.0.0 puede provocar un fallo de segmentación cuando el subjectaltname decodificado contiene un byte NULL. Este problema está solucionado en la versión 8.0.1. Como solución alternativa para este problema, deshabilite las reglas que utilizan la palabra clave tls.subjectaltname."
      }
    ],
    "id": "CVE-2025-59150",
    "lastModified": "2026-10-01T16:10:00.257",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "security-advisories@github.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-59150",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-02T15:39:20.519524Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-01T21:16:43.003",
    "references": [
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Release Notes"
        ],
        "url": "https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/OISF/suricata/commit/d590fdfe42e995fd558315f0c24f9a352e21479d"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Patch",
          "Third Party Advisory"
        ],
        "url": "https://github.com/OISF/suricata/security/advisories/GHSA-mhv7-qfmj-m3f3"
      },
      {
        "source": "security-advisories@github.com",
        "tags": [
          "Exploit",
          "Issue Tracking",
          "Vendor Advisory"
        ],
        "url": "https://redmine.openinfosecfoundation.org/issues/7881"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-detection-script"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "url": "https://www.vicarius.io/vsociety/posts/cve-2025-59150-suricata-mitigation-script"
      }
    ],
    "sourceIdentifier": "security-advisories@github.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-476"
          }
        ],
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Every claim, by kind

vulnerability

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed in version 8.0.1. To workaround this issue, disable rules using the tls.subjectaltname keyword.
zetlyn/cve-nvd · 2025-10-01
automatable yes cvss 7.5 cvss_vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H cwe CWE-476 exploitation none product suricata severity HIGH status Modified technical_impact partial vendor OISF source