CVE-2026-22263: Suricata Htp Unbounded Header Fold

An unbounded loop is used to process folded headers. This allows an attacker to cause Denial of Service (DoS) by sending excessively folded headers, leading to quadratic time complexity. Introduce an upper bound check with a counter explicitly incremented in the loop.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Rust
greprules fetch cve-2026-22263-suricata-htp-unbounded-header-fold --engine opengrep

Description

An unbounded loop is used to process folded headers. This allows an attacker to cause Denial of Service (DoS) by sending excessively folded headers, leading to quadratic time complexity. Introduce an upper bound check with a counter explicitly incremented in the loop.