VYPR
← All advisories
Low severity3.3NVD Advisory· Published Sep 18, 2026· Updated Sep 28, 2026

CVE-2026-57225

CVE-2026-57225

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/datasets-context-json.c assumes that a configured JSON or NDJSON dataset value_key resolves to a string. A trusted or untrusted dataset or rule feed containing a non-string value for that key can cause a NULL pointer dereference during startup, configuration test mode, or rule reload, crashing Suricata before traffic processing. This issue is fixed in version 8.0.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Oisf/Suricata2 versions
    cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*range: >=8.0.0,<8.0.6
    • (no CPE)range: 8.0.0 - 8.0.6

Patches

Vulnerability mechanics

References

6

News mentions

1