Open Information Security Foundation

08/14/2026

VJ 09:00 AM Suricata Bug #8836 (Assigned): erf/file: sets packet length from unvalidated wlen, causing OOB heap read in decoder

Thanks! Yeah the analysis is by AI, so it's not always correct. Btw the related ticket #8865 is also about ERF. Victor Julien

08/13/2026

VJ 02:16 PM Suricata Feature #8523: dcerpc: map opnum to the function names

Now I'd like (a) rule keyword(s) to match on the newly logged fields. Is there a ticket already? Victor Julien

VJ 09:02 AM Suricata Bug #8849: detect: DetectReferenceParse leaves ref->key NULL on unknown-key fallback path, leading to NULL deref in alert output

Treating like a regular bug as it's quite an unlikely and non-default scenario. Victor Julien

VJ 08:52 AM Suricata Bug #8865: erf/file: Heap buffer overflow in ERF file reader via untrusted rlen field

Considering this a regular bug. Victor Julien

VJ 08:51 AM Suricata Bug #8846: unwind: snprintf return value used to advance pointer past buffer in SIGSEGV/SIGABRT handler

Considering this to be a regular bug. Victor Julien

VJ 08:50 AM Suricata Bug #8836: erf/file: sets packet length from unvalidated wlen, causing OOB heap read in decoder

@sfd do you have interest in looking into this? Victor Julien

VJ 08:49 AM Suricata Bug #8836: erf/file: sets packet length from unvalidated wlen, causing OOB heap read in decoder

Considering this a bug. Victor Julien

VJ 08:48 AM Suricata Bug #8825: unix-socket: corrupt program stack iff Suricata started with open file limit > 1024

We consider this a bug as the unix socket is an admin interface that should not have this many clients in normal use. Access to the socket implies the user has the capability to just stop Suricata as well. Victor Julien

VJ 08:47 AM Suricata Bug #8824: unix-socket: unbounded blocking call to accept new client hangs Unix manager thread

We consider this a bug as the unix socket is an admin interface. Access to it means many other things can be done, including simply stopping Suricata. Victor Julien

08/06/2026

VJ 01:46 PM Suricata Bug #8817 (In Review): decode/ipv6: OOB read with Hop-by-Hop and Destination Options extension headers

https://github.com/OISF/suricata/pull/15989 Victor Julien