Handler on Duty: Xavier Mertens
Threat Level: green
| Published | 2026-09-20 02:16:53 |
|---|---|
| Last Modified | 2026-09-20 02:16:53 |
| AKA | CVE-2026-94084 |
| Summary | Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform. |
| Access Vector | Local | Adjacent | Network |
|---|---|---|---|
| Access Complexity | Low | Medium | High |
| Authentication | None | Single | Multiple |
| Confidentiality | None | Partial | Complete |
| Integrity | None | Partial | Complete |
| Availability | None | Partial | Complete |
