Critical
suricata — security advisory
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
- Products
- suricata
- Affected versions
- 1:6.0.4-2, 1:6.0.4-3, 1:7.0.0-2, 1:7.0.10-1, 1:7.0.2-1, 1:7.0.2-1build1, 1:7.0.3-1build1, 1:7.0.3-1build3, 1:7.0.8-2, 1:8.0.1-3build1, 1:8.0.2-1, 1:8.0.2-1build1, 1:8.0.3-1, 1:8.0.5-1, 1:8.0.6-1, 2.0.10-1, 2.0.10-2, 2.0.11-1, 2.0.8-1build1, 2.0.9-1, 3.0-1, 3.2-2ubuntu3
- Fixed versions
- Not specified
- CVEs
- CVE-2023-35853
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:02 UTC · Revision 1
Source evidence
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
osv:UBUNTU-CVE-2023-35853
suricata
Fixed versions: Not specified
suricata
Fixed versions: Not specified
suricata
Fixed versions: Not specified
suricata
Fixed versions: Not specified
suricata
Fixed versions: Not specified
suricata
Fixed versions: Not specified
suricata
Fixed versions: Not specified
Complete source record
{
"id": "cb4828656bcc6c7df46f17fd0b395a3fb891aed674ee44be7f76d85395017c52",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-35853",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2023-35853",
"summary": "In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.",
"evidence": "osv:UBUNTU-CVE-2023-35853",
"products": [
{
"name": {
"value": "suricata",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.8-1build1",
"evidence": "/affected/0/versions"
},
{
"value": "2.0.9-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.0.10-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.0.10-2",
"evidence": "/affected/0/versions"
},
{
"value": "2.0.11-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "suricata",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.2-2ubuntu3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "suricata",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:6.0.4-2",
"evidence": "/affected/2/versions"
},
{
"value": "1:6.0.4-3",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "suricata",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:7.0.0-2",
"evidence": "/affected/3/versions"
},
{
"value": "1:7.0.2-1",
"evidence": "/affected/3/versions"
},
{
"value": "1:7.0.2-1build1",
"evidence": "/affected/3/versions"
},
{
"value": "1:7.0.3-1build1",
"evidence": "/affected/3/versions"
},
{
"value": "1:7.0.3-1build3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "suricata",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:7.0.8-2",
"evidence": "/affected/4/versions"
},
{
"value": "1:7.0.10-1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "suricata",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:8.0.3-1",
"evidence": "/affected/5/versions"
},
{
"value": "1:8.0.5-1",
"evidence": "/affected/5/versions"
},
{
"value": "1:8.0.6-1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "suricata",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:7.0.10-1",
"evidence": "/affected/6/versions"
},
{
"value": "1:8.0.1-3build1",
"evidence": "/affected/6/versions"
},
{
"value": "1:8.0.2-1",
"evidence": "/affected/6/versions"
},
{
"value": "1:8.0.2-1build1",
"evidence": "/affected/6/versions"
},
{
"value": "1:8.0.3-1",
"evidence": "/affected/6/versions"
}
]
}
],
"severity": "critical",
"structured": {
"id": "UBUNTU-CVE-2023-35853",
"aliases": [
"UBUNTU-CVE-2023-35853"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "suricata",
"purl": "pkg:deb/ubuntu/suricata?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"2.0.8-1build1",
"2.0.9-1",
"2.0.10-1",
"2.0.10-2",
"2.0.11-1",
"3.0-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35853.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "suricata",
"binary_version": "3.0-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "suricata",
"purl": "pkg:deb/ubuntu/suricata?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"3.2-2ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35853.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libhtp-0.5.23-1",
"binary_version": "3.2-2ubuntu3"
},
{
"binary_name": "suricata",
"binary_version": "3.2-2ubuntu3"
},
{
"binary_name": "suricata-hyperscan",
"binary_version": "3.2-2ubuntu3"
},
{
"binary_name": "suricata-oinkmaster",
"binary_version": "3.2-2ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "suricata",
"purl": "pkg:deb/ubuntu/suricata?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1:6.0.4-2",
"1:6.0.4-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35853.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "suricata",
"binary_version": "1:6.0.4-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "suricata",
"purl": "pkg:deb/ubuntu/suricata?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1:7.0.0-2",
"1:7.0.2-1",
"1:7.0.2-1build1",
"1:7.0.3-1build1",
"1:7.0.3-1build3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35853.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "suricata",
"binary_version": "1:7.0.3-1build3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "suricata",
"purl": "pkg:deb/ubuntu/suricata?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"1:7.0.8-2",
"1:7.0.10-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35853.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "suricata",
"binary_version": "1:7.0.10-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "suricata",
"purl": "pkg:deb/ubuntu/suricata?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"1:8.0.3-1",
"1:8.0.5-1",
"1:8.0.6-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35853.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "suricata",
"binary_version": "1:8.0.6-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "suricata",
"purl": "pkg:deb/ubuntu/suricata?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1:7.0.10-1",
"1:8.0.1-3build1",
"1:8.0.2-1",
"1:8.0.2-1build1",
"1:8.0.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35853.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "suricata",
"binary_version": "1:8.0.3-1"
}
]
}
}
],
"modified": "2026-10-17T12:56:23.286748052Z",
"provider": "osv",
"upstream": [
"CVE-2023-35853"
],
"references": [
"https://ubuntu.com/security/CVE-2023-35853",
"https://www.stamus-networks.com/stamus-labs",
"https://github.com/OISF/suricata/compare/suricata-6.0.12...suricata-6.0.13",
"https://github.com/OISF/suricata/commit/b95bbcc66db526ffcc880eb439dbe8abc87a81da",
"https://www.cve.org/CVERecord?id=CVE-2023-35853"
]
},
"related_cves": [
{
"value": "CVE-2023-35853",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 355527,
"published_at": "2023-06-19T04:15:00+00:00"
}