CVE-2025-59149 - CVE House

Back to Database

Status published Medium CVE-2025-59149

Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms

6.2 CVSS

Vulnerability Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In version 8.0.0, rules using keyword ldap.responses.attribute_type (which is long) with transforms can lead to a stack buffer overflow during Suricata startup or during a rule reload. This issue is fixed in version 8.0.1. To workaround this issue, users can disable rules with ldap.responses.attribute_type and transforms.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59149

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from OISF

View All →

Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer

Suricata is vulnerable to a null deref when used with base64_data

Suricata is vulnerable to unbounded memory growth for decompression

Suricata is vulnerable to a stack overflow from big content-type

Suricata is vulnerable to a stack overflow on larger compressed data

Affected Vendor

OISF

View all reports →

Affected Software

suricata

Vulnerable Versions:

>= 8.0.0, < 8.0.1

Timeline

Official Publish: October 1st, 2025

Last Modified: October 1st, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control

T1485 Data Destruction