A vulnerability in Suricata versions 8.0.0 to 8.0.1 allows unauthenticated attackers to cause a denial of service through uncontrolled memory consumption.

This flaw is an allocation of resources without limits (CWE-770), specifically triggered during the decompression of HTTP response bodies. An unauthenticated attacker can send crafted compressed traffic to exhaust system memory, leading to service failure.

Successful exploitation of this vulnerability results in a denial of service, effectively disabling network monitoring and intrusion detection capabilities. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to network visibility and security posture, potentially leaving systems blind to other malicious activities during the outage.

Immediate Action: Upgrade to Suricata version 8.0.2 or later to apply the necessary memory allocation limits.

Proactive Monitoring: Monitor system memory usage on Suricata sensors and review logs for repeated service crashes or unexpected resource exhaustion patterns.

Compensating Controls: If immediate patching is not feasible, disable LZMA decompression or reduce the response-body-limit configuration to mitigate the potential for unbounded memory growth.

Public Exploit Available: No (exploit_available: unknown)

The risk of service disruption via memory exhaustion is significant for critical network security infrastructure. Organizations should prioritize upgrading to version 8.0.2 immediately to ensure the stability and reliability of their Suricata deployment.