CVE-2026-31934

Published: Apr 2, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4.

Affected (1)

Products: Oisf: Suricata

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oisf Suricata	From 8.0.0 to 8.0.4

Related CWEs

Inefficient Algorithmic Complexity

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

References (2)

https://github.com/OISF/suricata/security/advisories/GHSA-hr89-h2pp-f3c8

Source: security-advisories@github.com

Vendor Advisory

https://redmine.openinfosecfoundation.org/issues/8292

Source: security-advisories@github.com

Issue TrackingPermissions Required

Timeline

No history available yet.