CVE-2026-45759
Description
A flaw was found in Suricata, a network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring (NSM) engine. A remote attacker could exploit this vulnerability by sending crafted HTTP traffic with large Content-Disposition headers. This could lead to excessive CPU usage, resulting in a denial of service (DoS) for the Suricata instance.
Statement
This vulnerability is rated as Important because unauthenticated remote attackers can transmit malicious network traffic that consumes excessive processing resources without privileges, causing the inspection engine to become unresponsive. In an intrusion detection or prevention role, service exhaustion blinds monitoring sensors and prevents inspection or filtering of subsequent network traffic across monitored segments. Suricata is not included or supported in Red Hat Enterprise Linux releases, meaning standard enterprise installations do not ship this component and are not exposed by default.
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Resource Consumption (CPU); DoS: Resource Consumption (Memory); DoS: Resource Consumption (Other); Reduce Performance
This issue can make the product perform more slowly. If an attacker can influence the number of iterations in the loop, then this performance problem might allow a denial of service by consuming more platform resources than intended.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
