Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, us…

A denial-of-service vulnerability exists in Suricata network IDS/IPS/NSM engine prior to versions 7.0.15 and 8.0.4. The vulnerability allows attackers to flood the system with crafted HTTP2 continuation frames, leading to memory exhaustion and causing the Suricata process to be shut down by the operating system. This affects the availability of the security monitoring system, potentially leaving networks unprotected. The issue has been patched in Suricata versions 7.0.15 and 8.0.4, and users should upgrade immediately to mitigate this risk.