Project

General

Profile

Actions
Copy link

Bug #1385

closed
VJ VJ

DCERPC traffic parsing issue

Bug #1385: DCERPC traffic parsing issue

Added by Victor Julien about 11 years ago. Updated about 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
2.0.7
Affected Versions:
Effort:
Difficulty:
Label:

Description

This is a parsing issue in the DCERPC parser that can happen when Suricata runs out of memory. The exact scope of the problem isn't clear, but it could certainly lead to crashes. RCE might theoretically be possible but looks like it's very hard.

It was brought to our attention by the Yahoo Pentest Team.

Actions
Copy link

Also available in: PDF Atom