Suricata, a network intrusion detection and prevention system, contains a quadratic‑time inefficiency in its HTTP/1 header parsing logic. This flaw reflects CWE‑1050, representing an inefficient algorithm that results in unnecessary comparisons when processing many HTTP packets. The primary impact is a denial‑of‑service through CPU exhaustion; the flaw does not affect data confidentiality or integrity.

The vulnerability affects the OISF Suricata product, specifically versions 8.0.0 through 8.0.2. Version 8.0.3 and later incorporate the fix, but earlier releases remain vulnerable. No other vendors or versions are listed. Administrators running Suricata intended for high‑traffic environments should verify their installation version.

The CVSS score of 5.3 indicates moderate severity, and the EPSS score of less than 1% suggests low current exploitation probability. Based on the description, the likely attack vector is that an adversary would send numerous HTTP requests over the public network interface, which would trigger the slow parsing loop and deplete CPU resources; the issue does not compromise confidentiality or integrity, only availability. The flaw is not present in the CISA KEV catalog at present. Administrators should monitor for abnormal CPU usage and apply the 8.0.3 update promptly.