Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering
    can lead to a performance degradation. This issue has been patched in version 7.0.15. (CVE-2026-31937)

  - Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of the
    "tls.alpn" rule keyword can cause Suricata to crash with a NULL dereference. This issue has been patched
    in version 8.0.4. (CVE-2026-31931)

  - Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5
    buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4.
    (CVE-2026-31932)

  - Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted
    traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in
    versions 7.0.15 and 8.0.4. (CVE-2026-31933)

  - Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a
    quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a
    performance impact. This issue has been patched in version 8.0.4. (CVE-2026-31934)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2     continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut     down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4. (CVE-2026-31935)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
446514	Alpine: multiple suricata packages: security update to 8.0.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
446514	Alpine: multiple suricata packages: security update to 8.0.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
304876	Linux Distros Unpatched Vulnerability : CVE-2026-31935	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-31935

high

Tenable Plugins

high

high

high