DEBIAN-CVE-2026-45767

    Dashboard / Vulnerabilities / DEBIAN-CVE-2026-45767

    DEBIAN-CVE-2026-45767

    Published: 10 Sept 2026Last Modified: 12 Sept 2026
    Upstream:
    CVE-2026-45767

    Summary:

    Details: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some workarounds are available. Preprocess `load`+ `save` rules to disallow absolute filenames for save, use Suricata's privilege dropping to limit writable files, and/or configure landlock in suricata.yaml.

    References: https://security-tracker.debian.org/tracker/CVE-2026-45767

    Affected packages

    Package

    Name: suricata

    Purl: pkg:deb/debian/suricata?arch=source&distro=trixie

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    1:7.0.10-1
    1:7.0.10-1+deb13u1
    1:7.0.10-1+deb13u2
    1:7.0.10-1+deb13u3
    1:7.0.10-1+deb13u4
    1:7.0.11-1
    1:7.0.11-1~bpo13+1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    DEBIAN-CVE-2026-45767 | CVE-DB