CVE-2026-22263

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-22263

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

S

uricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.

References
Link Resource
https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428 Patch
https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7 Vendor Advisory
https://redmine.openinfosecfoundation.org/issues/8201 Permissions Required
Configurations

Configuration 1 (hide)

cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
History

29 Jan 2026, 21:00

Type Values Removed Values Added
First Time Oisf
Oisf suricata
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
References () https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428 - () https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428 - Patch
References () https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7 - () https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7 - Vendor Advisory
References () https://redmine.openinfosecfoundation.org/issues/8201 - () https://redmine.openinfosecfoundation.org/issues/8201 - Permissions Required

27 Jan 2026, 19:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-27 19:16

Updated : 2026-01-29 21:00

NVD link : CVE-2026-22263

Mitre link : CVE-2026-22263

CVE.ORG link : CVE-2026-22263

JSON object : View

Products Affected

oisf

CWE
CWE-1050

Excessive Platform Resource Consumption within a Loop

NVD-CWE-noinfo