CVE-2025-59148 - CVE House

Back to Database

Status published High CVE-2025-59148

Suricata's improper use of entropy keyword can lead to a NULL-ptr deref

7.5 CVSS

Vulnerability Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versions 8.0.0 and below incorrectly handle the entropy keyword when not anchored to a "sticky" buffer, which can lead to a segmentation fault. This issue is fixed in version 8.0.1. To workaround this issue, users can disable rules using the entropy keyword, or validate they are anchored to a sticky buffer.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59148

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from OISF

View All →

Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer

Suricata is vulnerable to a null deref when used with base64_data

Suricata is vulnerable to unbounded memory growth for decompression

Suricata is vulnerable to a stack overflow from big content-type

Suricata is vulnerable to a stack overflow on larger compressed data

Affected Vendor

OISF

View all reports →

Affected Software

suricata

Vulnerable Versions:

< 8.0.1

Timeline

Official Publish: October 1st, 2025

Last Modified: October 1st, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1499.004 Application or System Exploitation

T1489 Service Stop

T1203 Exploitation for Client Execution

T1190 Exploit Public-Facing Application