CVE-2026-46352 - Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock

Back Back to CVE browser

HIGH

Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock

Published Sep 16, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.47%

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protocol whose payload is itself fragmented. Version 8.0.5 contains a fix. No known workarounds are available.

Affected products

Vendor OISF Product Suricata Default
n/a
- Version
  >= 8.0.0, < 8.0.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

OISF

Suricata

n/a

Version	Status	Constraints
>= 8.0.0, < 8.0.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-833

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80940
Advisory
https://forum.suricata.io/t/suricata-8-0-5-and-7-0-16-released/6315
x_refsource_MISC
https://github.com/OISF/suricata/security/advisories/GHSA-rc34-46x6-mxxm
x_refsource_CONFIRM
https://redmine.openinfosecfoundation.org/issues/8550
x_refsource_MISC

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80940		Advisory
https://forum.suricata.io/t/suricata-8-0-5-and-7-0-16-released/6315		x_refsource_MISC
https://github.com/OISF/suricata/security/advisories/GHSA-rc34-46x6-mxxm		x_refsource_CONFIRM
https://redmine.openinfosecfoundation.org/issues/8550		x_refsource_MISC