CVE-2025-59147
Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets
Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versions 7.0.11 and below, as well as 8.0.0, are vulnerable to detection bypass when crafted traffic sends multiple SYN packets with different sequence numbers within the same flow tuple, which can cause Suricata to fail to pick up the TCP session. In IDS mode this can lead to a detection and logging bypass. In IPS mode this will lead to the flow getting blocked. This issue is fixed in versions 7.0.12 and 8.0.1.
No summary for this CVE yet.
CVSS Vector Breakdown
Exploitability
AV:NAttack VectorNetwork
AC:LAttack ComplexityLow
PR:NPrivileges RequiredNone
UI:NUser InteractionNone
Scope
S:UScopeUnchanged
Impact
C:NConfidentialityNone
I:HIntegrityHigh
A:NAvailabilityNone
Weaknesses
Affected Products
OISF
oss-projectaka libhtp, suricata-update, suricata
АО «НТЦ ИТ РОСА»
commercial·RU
Open Information Security Foundation
oss-projectaka ofis, suricata, libhtp
ООО "Айдеко Софтвер"
commercial·RUaka aidco software, айде́ко софтвер
АО «ИВК»
commercial·RUaka ivk
and 4 more affected products View all →
Exploitability
Official Patch Available
References
https://forum.suricata.io/t/suricata-8-0-1-and-7-0-12-released/6018
forum.suricata.io
https://github.com/OISF/suricata/commit/be6315dba0d9101b11d16e9dacfe2822b3792f1b
github.com
https://github.com/OISF/suricata/commit/e91b03c90385db15e21cf1a0e85b921bf92b039e
github.com
and 7 more references View all →
Unlock Complete Vulnerability Intelligence
Get the full picture for CVE-2025-59147 and every CVE in our database. Create a free account — no credit card required.
Create Free AccountPlain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows