CVE-2026-45768

High

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, LDAP transaction state could store an unbounded number of responses. Because LDAP can be processed over UDP, crafted traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Version 8.0.5 contains a fix. As a workaround, disable LDAP application-layer parsing where it is not required. Alternatively, use a rule like `alert ldap any any -> any any (sid: 1; ldap.responses.count: >1024; bypass;)`.

SeverityHigh

CVSS7.5

Exploit probability—

ProductOisf Suricata

PublishedSep 10, 2026

First seenSep 10, 2026

Weakness typeCWE-400Uncontrolled resource consumption CWE-770Allocation of resources without limits

How to fix

Update

oisf suricata8.0.5 or later

Affected products

Product	Affected versions	Fixed in
oisf suricata	8.0.0 ≤ v < 8.0.5	8.0.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.