The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates.
http://www.debian.org/security/2015/dsa-3254
http://suricata-ids.org/2015/05/06/suricata-2-0-8-available/