CVE-2026-22263
Publication date 27 January 2026
Last updated 28 January 2026
Ubuntu priority
Description
Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| suricata | 25.10 questing |
Needs evaluation
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
5.3 · Medium
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | Low |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
References
Other references
- https://www.cve.org/CVERecord?id=CVE-2026-22263
- https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7
- https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428 (suricata-8.0.3)
- https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428
- https://redmine.openinfosecfoundation.org/issues/8201