CVE-2025-29918 — Infinite Loop in Suricata

CWE-835 — Infinite Loop4 documents4 sources
Severity
5.5MEDIUMNVD
CNA6.2
EPSS
0.1%
top 75.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oisf Suricata
Timeline
PublishedApr 10

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that leads to an infinite loop when negated PCRE is used. Packet processing thread becomes stuck in infinite loop limiting visibility and availability in inline mode. This vulnerability is fixed in 7.0.9.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5oisf/suricata< 7.0.9
▶NVDoisf/suricata< 7.0.9
▶Debianoisf/suricata< 1:6.0.1-3+deb11u1+2

Patches

Patch: github.com ↗

🔴Vulnerability Details

2
OSV
CVE-2025-29918: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine↗2025-04-10
▶
CVEList
Suricata pcre: negated pcr can cause infinite loop↗2025-04-10
▶

📋Vendor Advisories

1
Debian
CVE-2025-29918: suricata - Suricata is a network Intrusion Detection System, Intrusion Prevention System an...↗2025
▶
CVE-2025-29918 — Infinite Loop in Oisf Suricata | cvebase