Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion

Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms

Suricata swf: heap buffer overflow in SWF decompression depth handling

Suricata detect/transform: use-after-free in decompress transforms

Suricata lua: sandbox allocation limit not enforced for new allocations

Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading

Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load

Suricata pcre: negated pcr can cause infinite loop

Suricata decode_base64: signature can do large memory allocation

Suricata datasets: ruleset declared settings can lead to resource starvation

Suricata oversized bpf file can lead to buffer overflow

Suricata smtp/mime: incomplete state reset allows detection bypass

Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection

Suricata sip: large SIP message bodies can evade detection with frame keyword

Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6

Suricata http1: quadratic complexity in headers parsing over multiple packets

Suricata eve/alert: http1 xff handling can lead to denial of service

Suricata defrag: off by one can lead to policy bypass

Suricata's defrag contains various issues leading to policy bypass

Suricata http2: header handling evasion

Suricata datasets: save to absolute filename can be bypassed when combined with load command