{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "extracted_events": [
              {
                "introduced": "8.0.0"
              },
              {
                "fixed": "8.0.6"
              },
              {
                "introduced": "0"
              },
              {
                "fixed": "7.0.17"
              }
            ],
            "source": [
              "AFFECTED_FIELD",
              "REFERENCES"
            ]
          },
          "events": [
            {
              "introduced": "9956286fb89f9cad9e9f95b99dc751f8666617b7"
            },
            {
              "introduced": "0"
            },
            {
              "fixed": "4c28cc1b4ac64f48efdca6ce3e09748227a04a7e"
            },
            {
              "fixed": "f707f3208de8216e4eccada5c10e6edce460a82a"
            },
            {
              "fixed": "755d6c3061de4d7ba97f0ed31cdc17ab8cab4476"
            },
            {
              "fixed": "7ec9d72d28b9370712cf77a5b9d40d6b5db27cb4"
            },
            {
              "fixed": "88adab8bd3d62912941647ab65032d5ec75c893a"
            },
            {
              "fixed": "9a54a043516e644bb7b9d34117a91977f950a281"
            },
            {
              "fixed": "bc39274a638d1cca2391cfa4891c8b6c255ff9ce"
            },
            {
              "fixed": "c8f68b0e4f9e721dca1c9ed6e08597c6964c7ac3"
            }
          ],
          "repo": "https://github.com/oisf/suricata",
          "type": "GIT"
        }
      ]
    }
  ],
  "aliases": [
    "GHSA-hvvj-c8xx-9g35"
  ],
  "database_specific": {
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
      "CWE-400",
      "CWE-401",
      "CWE-407"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63448.json"
  },
  "details": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, because cleanup waits for inspection in the unseen direction. The transaction creation paths in rust/src/smb can exceed the intended SMB_MAX_TX bound, and cleanup repeatedly scans the growing list. Sustained one-directional SMB traffic can therefore cause unbounded per-flow state and CPU and memory exhaustion. This issue is fixed in versions 8.0.6 and 7.0.17.",
  "id": "CVE-2026-63448",
  "modified": "2026-09-20T11:30:54.334072094Z",
  "published": "2026-09-18T20:20:01.185Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/OISF/suricata/releases/tag/suricata-7.0.17"
    },
    {
      "type": "WEB",
      "url": "https://github.com/OISF/suricata/releases/tag/suricata-8.0.6"
    },
    {
      "type": "WEB",
      "url": "https://redmine.openinfosecfoundation.org/issues/8629"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63448.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/OISF/suricata/security/advisories/GHSA-hvvj-c8xx-9g35"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63448"
    },
    {
      "type": "FIX",
      "url": "https://github.com/OISF/suricata/commit/755d6c3061de4d7ba97f0ed31cdc17ab8cab4476"
    },
    {
      "type": "FIX",
      "url": "https://github.com/OISF/suricata/commit/7ec9d72d28b9370712cf77a5b9d40d6b5db27cb4"
    },
    {
      "type": "FIX",
      "url": "https://github.com/OISF/suricata/commit/88adab8bd3d62912941647ab65032d5ec75c893a"
    },
    {
      "type": "FIX",
      "url": "https://github.com/OISF/suricata/commit/9a54a043516e644bb7b9d34117a91977f950a281"
    },
    {
      "type": "FIX",
      "url": "https://github.com/OISF/suricata/commit/bc39274a638d1cca2391cfa4891c8b6c255ff9ce"
    },
    {
      "type": "FIX",
      "url": "https://github.com/OISF/suricata/commit/c8f68b0e4f9e721dca1c9ed6e08597c6964c7ac3"
    }
  ],
  "schema_version": "1.9.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Suricata smb: some SMB flows can cause resource exhaustion"
}