Logo
Retour à la veille

CVE-2026-63448

Publié : 18 septembre 2026
Modifié : 18 septembre 2026
Lien officiel NVD
Score CVSS
5.9
MEDIUM

Description détaillée

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, because cleanup waits for inspection in the unseen direction. The transaction creation paths in rust/src/smb can exceed the intended SMB_MAX_TX bound, and cleanup repeatedly scans the growing list. Sustained one-directional SMB traffic can therefore cause unbounded per-flow state and CPU and memory exhaustion. This issue is fixed in versions 8.0.6 and 7.0.17.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Références et Patchs

https://github.com/OISF/suricata/commit/755d6c3061de4d7ba97f0ed31cdc17ab8cab4476https://github.com/OISF/suricata/commit/7ec9d72d28b9370712cf77a5b9d40d6b5db27cb4https://github.com/OISF/suricata/commit/88adab8bd3d62912941647ab65032d5ec75c893ahttps://github.com/OISF/suricata/commit/9a54a043516e644bb7b9d34117a91977f950a281https://github.com/OISF/suricata/commit/bc39274a638d1cca2391cfa4891c8b6c255ff9cehttps://github.com/OISF/suricata/commit/c8f68b0e4f9e721dca1c9ed6e08597c6964c7ac3https://github.com/OISF/suricata/releases/tag/suricata-7.0.17https://github.com/OISF/suricata/releases/tag/suricata-8.0.6https://github.com/OISF/suricata/security/advisories/GHSA-hvvj-c8xx-9g35https://redmine.openinfosecfoundation.org/issues/8629

Dernières Vulnérabilités

CVE-2026-93923

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with full system access.

VOIR DÉTAILS

CVE-2026-93922

SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attackers can create notebooks with HTML payloads in names that execute JavaScript with Node.js access when the picker opens, enabling operating system command execution.

VOIR DÉTAILS

CVE-2026-93921

SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint, allowing read-only token holders to access document metadata. Attackers can call the endpoint with type=8 and crafted content to read block titles, names, aliases, and hierarchical paths of restricted documents via template injection.

VOIR DÉTAILS