PUBLISHED DATE: April 10, 2025CVE-2025-29917:
Suricata is a network...

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The bytes setting in the decode_base64 keyword is not properly limited. Due to this, signatures using the keyword and setting can cause large memory allocations of up to 4 GiB per thread. This vulnerability is fixed in 7.0.9.

Products

• OISF Suricata
• OISF (The Open Information Security Foundation) Suricata
• OISF (The Open Information Security Foundation) Suricata 0.8.2
• OISF (The Open Information Security Foundation) Suricata 1.0.0
• OISF (The Open Information Security Foundation) Suricata 1.0.1
• OISF (The Open Information Security Foundation) Suricata 1.0.2
• OISF (The Open Information Security Foundation) Suricata 1.0.3
• OISF (The Open Information Security Foundation) Suricata 1.0.4
• OISF (The Open Information Security Foundation) Suricata 1.0.5
• OISF (The Open Information Security Foundation) Suricata 1.1.1
• OISF (The Open Information Security Foundation) Suricata 1.1
• OISF (The Open Information Security Foundation) Suricata 1.1 Beta 1
• OISF (The Open Information Security Foundation) Suricata 1.1 Beta 2
• OISF (The Open Information Security Foundation) Suricata 1.1 Beta 3
• OISF (The Open Information Security Foundation) Suricata 1.1 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 1.2.1
• OISF (The Open Information Security Foundation) Suricata 1.2
• OISF 1.2 Beta1
• OISF (The Open Information Security Foundation) Suricata 1.2 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 1.3.1
• OISF (The Open Information Security Foundation) Suricata 1.3.2
• OISF (The Open Information Security Foundation) Suricata 1.3.3
• OISF (The Open Information Security Foundation) Suricata 1.3.4
• OISF (The Open Information Security Foundation) Suricata 1.3.5
• OISF (The Open Information Security Foundation) Suricata 1.3.6
• OISF (The Open Information Security Foundation) Suricata 1.3
• OISF (The Open Information Security Foundation) Suricata 1.3 Beta 1
• OISF (The Open Information Security Foundation) Suricata 1.3 Beta 2
• OISF (The Open Information Security Foundation) Suricata 1.3 Beta 3
• OISF (The Open Information Security Foundation) Suricata 1.3 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 1.4.1
• OISF (The Open Information Security Foundation) Suricata 1.4.2
• OISF (The Open Information Security Foundation) Suricata 1.4.3
• OISF (The Open Information Security Foundation) Suricata 1.4.4
• OISF (The Open Information Security Foundation) Suricata 1.4.5
• OISF (The Open Information Security Foundation) Suricata 1.4.6
• OISF (The Open Information Security Foundation) Suricata 1.4.7
• OISF (The Open Information Security Foundation) Suricata 1.4
• OISF (The Open Information Security Foundation) Suricata 1.4 Beta 1
• OISF (The Open Information Security Foundation) Suricata 1.4 Beta 2
• OISF (The Open Information Security Foundation) Suricata 1.4 Beta 3
• OISF (The Open Information Security Foundation) Suricata 1.4 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 2.0.10
• OISF (The Open Information Security Foundation) Suricata 2.0.11
• OISF 2.0.1
• OISF (The Open Information Security Foundation) Suricata 2.0.1
• OISF (The Open Information Security Foundation) Suricata 2.0.1 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 2.0.2
• OISF (The Open Information Security Foundation) Suricata 2.0.3
• OISF (The Open Information Security Foundation) Suricata 2.0.4
• OISF (The Open Information Security Foundation) Suricata 2.0.5
• OISF (The Open Information Security Foundation) Suricata 2.0.6
• OISF (The Open Information Security Foundation) Suricata 2.0.7
• OISF (The Open Information Security Foundation) Suricata 2.0.8
• OISF (The Open Information Security Foundation) Suricata 2.0.9
• OISF (The Open Information Security Foundation) Suricata 2.0
• OISF (The Open Information Security Foundation) Suricata 2.0 Beta 1
• OISF (The Open Information Security Foundation) Suricata 2.0 Beta 2
• OISF (The Open Information Security Foundation) Suricata 2.0 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 2.0 Release Candidate 2
• OISF (The Open Information Security Foundation) Suricata 2.0 Release Candidate 3
• OISF (The Open Information Security Foundation) Suricata 2.1 Beta 1
• OISF (The Open Information Security Foundation) Suricata 2.1 Beta 2
• OISF (The Open Information Security Foundation) Suricata 2.1 Beta 3
• OISF (The Open Information Security Foundation) Suricata 2.1 Beta 4
• OISF (The Open Information Security Foundation) Suricata 3.0.1
• OISF (The Open Information Security Foundation) Suricata 3.0.1 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 3.0.2
• OISF (The Open Information Security Foundation) Suricata 3.0
• OISF (The Open Information Security Foundation) Suricata 3.0 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 3.0 Release Candidate 2
• OISF (The Open Information Security Foundation) Suricata 3.0 Release Candidate 3
• OISF (The Open Information Security Foundation) Suricata 3.1.1
• OISF (The Open Information Security Foundation) Suricata 3.1.2
• OISF (The Open Information Security Foundation) Suricata 3.1.3
• OISF (The Open Information Security Foundation) Suricata 3.1.4
• OISF (The Open Information Security Foundation) Suricata 3.1
• OISF (The Open Information Security Foundation) Suricata 3.1 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 3.2.1
• OISF (The Open Information Security Foundation) Suricata 3.2.2
• OISF (The Open Information Security Foundation) Suricata 3.2.3
• OISF (The Open Information Security Foundation) Suricata 3.2.4
• OISF (The Open Information Security Foundation) Suricata 3.2.5
• OISF (The Open Information Security Foundation) Suricata 3.2
• OISF (The Open Information Security Foundation) Suricata 3.2 Beta 1
• OISF (The Open Information Security Foundation) Suricata 3.2 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 4.0.0
• OISF (The Open Information Security Foundation) Suricata 4.0.0 Beta 1
• OISF (The Open Information Security Foundation) Suricata 4.0.0 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 4.0.0 Release Candidate 2
• OISF (The Open Information Security Foundation) Suricata 4.0.1
• OISF (The Open Information Security Foundation) Suricata 4.0.2
• OISF (The Open Information Security Foundation) Suricata 4.0.3
• OISF (The Open Information Security Foundation) Suricata 4.0.4
• OISF 4.0.5
• OISF 4.0.6
• OISF 4.0.7
• OISF 4.1.0
• OISF (The Open Information Security Foundation) Suricata 4.1.0
• OISF (The Open Information Security Foundation) Suricata 4.1.0 Beta 1
• OISF Suricata 4.1.0 Release Candidate 1
• OISF Suricata 4.1.0 Release Candidate 2
• OISF (The Open Information Security Foundation) Suricata 4.1.10
• OISF 4.1.1
• OISF 4.1.2
• OISF 4.1.3
• OISF 4.1.4
• OISF (The Open Information Security Foundation) Suricata 4.1.5
• OISF (The Open Information Security Foundation) Suricata 4.1.6
• OISF (The Open Information Security Foundation) Suricata 4.1.7
• OISF (The Open Information Security Foundation) Suricata 4.1.8
• OISF (The Open Information Security Foundation) Suricata 4.1.9
• OISF (The Open Information Security Foundation) Suricata 5.0.0
• OISF (The Open Information Security Foundation) Suricata 5.0.0 Beta 1
• OISF (The Open Information Security Foundation) Suricata 5.0.0 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 5.0.10
• OISF (The Open Information Security Foundation) Suricata 5.0.1
• OISF (The Open Information Security Foundation) Suricata 5.0.2
• OISF (The Open Information Security Foundation) Suricata 5.0.3
• OISF (The Open Information Security Foundation) Suricata 5.0.4
• OISF (The Open Information Security Foundation) Suricata 5.0.5
• OISF (The Open Information Security Foundation) Suricata 5.0.6
• OISF (The Open Information Security Foundation) Suricata 5.0.7
• OISF (The Open Information Security Foundation) Suricata 5.0.8
• OISF (The Open Information Security Foundation) Suricata 5.0.9
• OISF (The Open Information Security Foundation) Suricata 6.0.0 -
• OISF (The Open Information Security Foundation) Suricata 6.0.0 Beta 1
• OISF (The Open Information Security Foundation) Suricata 6.0.0 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 6.0.10
• OISF (The Open Information Security Foundation) Suricata 6.0.11
• OISF (The Open Information Security Foundation) Suricata 6.0.12
• OISF (The Open Information Security Foundation) Suricata 6.0.13
• OISF (The Open Information Security Foundation) Suricata 6.0.14
• OISF (The Open Information Security Foundation) Suricata 6.0.15
• OISF (The Open Information Security Foundation) Suricata 6.0.16
• OISF (The Open Information Security Foundation) Suricata 6.0.17
• OISF (The Open Information Security Foundation) Suricata 6.0.18
• OISF (The Open Information Security Foundation) Suricata 6.0.19
• OISF (The Open Information Security Foundation) Suricata 6.0.1
• OISF (The Open Information Security Foundation) Suricata 6.0.20
• OISF (The Open Information Security Foundation) Suricata 6.0.2
• OISF (The Open Information Security Foundation) Suricata 6.0.3
• OISF (The Open Information Security Foundation) Suricata 6.0.4
• OISF (The Open Information Security Foundation) Suricata 6.0.5
• OISF (The Open Information Security Foundation) Suricata 6.0.6
• OISF (The Open Information Security Foundation) Suricata 6.0.7
• OISF (The Open Information Security Foundation) Suricata 6.0.8
• OISF (The Open Information Security Foundation) Suricata 6.0.9
• OISF (The Open Information Security Foundation) Suricata 7.0.0
• OISF (The Open Information Security Foundation) Suricata 7.0.0 Beta 1
• OISF (The Open Information Security Foundation) Suricata 7.0.0 Release Candidate 1
• OISF (The Open Information Security Foundation) Suricata 7.0.0 Release Candidate 2
• OISF (The Open Information Security Foundation) Suricata 7.0.1
• OISF (The Open Information Security Foundation) Suricata 7.0.2
• OISF (The Open Information Security Foundation) Suricata 7.0.3
• OISF (The Open Information Security Foundation) Suricata 7.0.4
• OISF (The Open Information Security Foundation) Suricata 7.0.5
• OISF (The Open Information Security Foundation) Suricata 7.0.6
• OISF (The Open Information Security Foundation) Suricata 7.0.7
• OISF (The Open Information Security Foundation) Suricata 7.0.8

Questions to Ask Vendors

1. Can you confirm whether your systems are affected by CVE-2025-29917, and if so, what steps are you currently taking to mitigate this vulnerability?
2. What is your estimated timeline for fully resolving CVE-2025-29917 in your products or services, and how will you communicate updates on this issue to us as your customer?

Recommended Actions

• Check out the advisory links provided below.

References

• https://capec.mitre.org/data/definitions/125.html
• https://capec.mitre.org/data/definitions/130.html
• https://capec.mitre.org/data/definitions/147.html
• https://capec.mitre.org/data/definitions/197.html
• https://capec.mitre.org/data/definitions/229.html
• https://capec.mitre.org/data/definitions/230.html
• https://capec.mitre.org/data/definitions/231.html
• https://capec.mitre.org/data/definitions/469.html
• https://capec.mitre.org/data/definitions/482.html
• https://capec.mitre.org/data/definitions/486.html
• https://capec.mitre.org/data/definitions/487.html
• https://capec.mitre.org/data/definitions/488.html
• https://capec.mitre.org/data/definitions/489.html
• https://capec.mitre.org/data/definitions/490.html
• https://capec.mitre.org/data/definitions/491.html
• https://capec.mitre.org/data/definitions/493.html
• https://capec.mitre.org/data/definitions/494.html
• https://capec.mitre.org/data/definitions/495.html
• https://capec.mitre.org/data/definitions/496.html
• https://capec.mitre.org/data/definitions/528.html
• https://nvd.nist.gov/vuln/detail/CVE-2025-29917