CVE-2026-31934
Description
A flaw was found in Suricata, a network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring (NSM) engine. A remote attacker could exploit a quadratic complexity issue when searching for URLs in MIME-encoded messages over SMTP. This could lead to a significant performance impact, potentially causing a Denial of Service (DoS) condition for the affected system.
Statement
This Important flaw in Suricata affects versions 8.0.0 through 8.0.3. A remote attacker can trigger a Denial of Service by sending specially crafted MIME-encoded SMTP messages, leading to a quadratic complexity issue during URL processing. This can significantly degrade performance and impact the availability of the Suricata engine.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Resource Consumption (CPU)
Attackers can create crafted inputs that intentionally cause the regular expression to use excessive backtracking in a way that causes the CPU consumption to spike.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
