Vulnerabilities > CVE-2025-29918 - Infinite Loop vulnerability in Oisf Suricata

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

oisf

CWE-835

NVD

Published: 2025-04-10

Updated: 2025-05-29

Summary

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that leads to an infinite loop when negated PCRE is used. Packet processing thread becomes stuck in infinite loop limiting visibility and availability in inline mode. This vulnerability is fixed in 7.0.9.

Vulnerable Configurations

Part	Description	Count
Application	Oisf Oisf Suricata - Oisf Suricata 0.8.2 Oisf Suricata 1.0.0 Oisf Suricata 1.0.1 Oisf Suricata 1.0.2 Oisf Suricata 1.0.3 Oisf Suricata 1.0.4 Oisf Suricata 1.0.5 Oisf Suricata 1.1 Oisf Suricata 1.1.1 Oisf Suricata 1.2 Oisf Suricata 1.2.1 Oisf Suricata 1.3 Oisf Suricata 1.3.1 Oisf Suricata 1.3.2 Oisf Suricata 1.3.3 Oisf Suricata 1.3.4 Oisf Suricata 1.3.5 Oisf Suricata 1.3.6 Oisf Suricata 1.4 Oisf Suricata 1.4.1 Oisf Suricata 1.4.2 Oisf Suricata 1.4.3 Oisf Suricata 1.4.4 Oisf Suricata 1.4.5 Oisf Suricata 1.4.6 Oisf Suricata 1.4.7 Oisf Suricata 2.0 Oisf Suricata 2.0.1 Oisf Suricata 2.0.2 Oisf Suricata 2.0.3 Oisf Suricata 2.0.4 Oisf Suricata 2.0.5 Oisf Suricata 2.0.6 Oisf Suricata 2.0.7 Oisf Suricata 2.0.8 Oisf Suricata 2.0.9 Oisf Suricata 2.0.10 Oisf Suricata 2.0.11 Oisf Suricata 2.1 Oisf Suricata 3.0 Oisf Suricata 3.0.1 Oisf Suricata 3.0.2 Oisf Suricata 3.1 Oisf Suricata 3.1.1 Oisf Suricata 3.1.2 Oisf Suricata 3.1.3 Oisf Suricata 3.1.4 Oisf Suricata 3.2 Oisf Suricata 3.2.1 Oisf Suricata 3.2.2 Oisf Suricata 3.2.3 Oisf Suricata 3.2.4 Oisf Suricata 3.2.5 Oisf Suricata 4.0.0 Oisf Suricata 4.0.1 Oisf Suricata 4.0.2 Oisf Suricata 4.0.3 Oisf Suricata 4.0.4 Oisf Suricata 4.0.5 Oisf Suricata 4.0.6 Oisf Suricata 4.0.7 Oisf Suricata 4.1.0 Oisf Suricata 4.1.1 Oisf Suricata 4.1.2 Oisf Suricata 4.1.3 Oisf Suricata 4.1.4 Oisf Suricata 4.1.5 Oisf Suricata 4.1.6 Oisf Suricata 4.1.7 Oisf Suricata 4.1.8 Oisf Suricata 4.1.9 Oisf Suricata 4.1.10 Oisf Suricata 5.0.0 Oisf Suricata 5.0.1 Oisf Suricata 5.0.2 Oisf Suricata 5.0.3 Oisf Suricata 5.0.4 Oisf Suricata 5.0.5 Oisf Suricata 5.0.6 Oisf Suricata 5.0.7 Oisf Suricata 5.0.8 Oisf Suricata 5.0.9 Oisf Suricata 5.0.10 Oisf Suricata 6.0.0 Oisf Suricata 6.0.1 Oisf Suricata 6.0.2 Oisf Suricata 6.0.3 Oisf Suricata 6.0.4 Oisf Suricata 6.0.5 Oisf Suricata 6.0.6 Oisf Suricata 6.0.7 Oisf Suricata 6.0.8 Oisf Suricata 6.0.9 Oisf Suricata 6.0.10 Oisf Suricata 6.0.11 Oisf Suricata 6.0.12 Oisf Suricata 6.0.13 Oisf Suricata 6.0.14 Oisf Suricata 6.0.15 Oisf Suricata 6.0.16 Oisf Suricata 6.0.17 Oisf Suricata 6.0.18 Oisf Suricata 6.0.19 Oisf Suricata 6.0.20 Oisf Suricata 7.0.0 Oisf Suricata 7.0.1 Oisf Suricata 7.0.2 Oisf Suricata 7.0.3 Oisf Suricata 7.0.4 Oisf Suricata 7.0.5 Oisf Suricata 7.0.6 Oisf Suricata 7.0.7 Oisf Suricata 7.0.8	159

Common Weakness Enumeration (CWE)

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References