<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugzilla.rosa.ru/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4"
          urlbase="https://bugzilla.rosa.ru/"
          
          maintainer="d.postnikov@rosa.ru"
>

    <bug>
          <bug_id>15224</bug_id>
          
          <creation_ts>2025-06-03 22:24:50 +0300</creation_ts>
          <short_desc>[CVE 21] suricata 6.0.20 CVEs found</short_desc>
          <delta_ts>2025-06-04 06:29:16 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>2</classification_id>
          <classification>ROSA-based products</classification>
          <product>ROSA Fresh</product>
          <component>Packages from Main</component>
          <version>All</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>15222</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>Normal</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="alexei_safin">a.safin</reporter>
          <assigned_to name="ROSA Linux Bugs">bugs</assigned_to>
          <cc>a.proklov</cc>
          
          <cf_platform>2021.1</cf_platform>
          <cf_security_code></cf_security_code>
          <cf_package></cf_package>
          

      

      

      <flag name="secteam_verified"
          id="16739"
          type_id="2"
          status="?"
          setter="a.safin"
    />

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>76957</commentid>
    <comment_count>0</comment_count>
    <who name="alexei_safin">a.safin</who>
    <bug_when>2025-06-03 22:24:50 +0300</bug_when>
    <thetext>Описание CVE: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Datasets declared in rules have an option to specify the `hashsize` to use. This size setting isn&apos;t properly limited, so the hash table allocation can be large. Untrusted rules can lead to large memory allocations, potentially leading to denial of service due to resource starvation. This vulnerability is fixed in 7.0.9.

CVE ID: CVE-2025-29916
Пакет: suricata
Версия: 6.0.20
CVSS: None
Impact Score: None
Exploitability Score: None
CVSS v3: 6.2
Impact Score v3: 3.6
Exploitability Score v3: 2.5
Ссылка на NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-29916
Ссылка на CVE Search: http://158.255.4.149:17563/api/cve/CVE-2025-29916</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>76967</commentid>
    <comment_count>1</comment_count>
    <who name="Aleksandr Proklov">a.proklov</who>
    <bug_when>2025-06-04 06:29:16 +0300</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 15222 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>