CVE-2026-57225 - Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading
Brief
CVE ID : CVE-2026-57225
Published : Sept. 18, 2026, 8:17 p. m.
- 38 minutes ago
Description : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.
- 0 until 8.
- 6, src/datasets-context-json. c assumes that a configured JSON or NDJSON dataset value_key resolves to a string.
A trusted or untrusted dataset or rule feed containing a non-string value for that key can cause a NULL pointer dereference during startup, configuration test mode, or rule reload, crashing Suricata before traffic processing. This issue is fixed in version 8.
- 6.
Severity: 0.0
- NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...