CVE-2025-29918

low-risk

Published 2025-04-10

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that leads to an infinite loop when negated PCRE is used. Packet processing thread becomes stuck in infinite loop limiting visibility and availability in inline mode. This vulnerability is fixed in 7.0.9.

Do I need to act?

0.13% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.2/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Suricata

Affected Vendors

Oisf

References (4)

Patch https://github.com/OISF/suricata/commit/b14c67cbdf25fa6c7ffe0d04ddf3ebe67b12b50b

Vendor Advisory https://github.com/OISF/suricata/security/advisories/GHSA-924c-vvm5-9mqx

Permissions Required https://redmine.openinfosecfoundation.org/issues/7526

https://lists.debian.org/debian-lts-announce/2025/03/msg00029.html

/ 100

low-risk

Severity 20/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal