CVE-2026-45764

Received Received - Intake

Type Confusion in Suricata via HTTP/2 Traffic

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: GitHub, Inc.

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traffic may cause Suricata to crash, resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable HTTP/2 parsing if it is not required.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-45764

Affected Vendors & Products

Vendor	Product	Version / Range
oisf	suricata	to 8.0.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-843	The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

Executive Summary

Suricata is a network security tool that monitors traffic for intrusions. A bug in versions before 7.0.16 and 8.0.5 causes a type confusion issue when processing HTTP/2 traffic. This happens due to a protocol change and can lead to crashes, causing denial of service.

Detection Guidance

To detect this vulnerability, monitor Suricata logs for crashes or errors related to HTTP/2 traffic processing. Check Suricata version with 'suricata --version' and compare against 7.0.16 or 8.0.5. Enable verbose logging with '-v' flag to capture protocol errors.

Impact Analysis

If exploited, this vulnerability could crash Suricata, disrupting network monitoring or protection. This may result in unmonitored traffic, potential security breaches, or service outages. Attackers could leverage this to bypass security controls.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and monitoring. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Upgrade Suricata to version 7.0.16 or 8.0.5. If upgrading is not possible, disable HTTP/2 parsing by setting 'http2-enabled: no' in Suricata configuration. Restart Suricata after changes.

Hi! I’m here to help you understand CVE-2026-45764. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70