Project

General

Profile

Actions
Copy link

Bug #2863

closed

out of bounds read in detection

Added by Victor Julien over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
4.0.7
Affected Versions:
4.0.6
Effort:
Difficulty:
Label:

Description

A rule that is not set to 'alert http' that uses a regular content match combined with a pcre with an http modifier (e.g. /U) can lead to the HTTP inspection functions accessing a non-HTTP state. This can lead to out of bounds reads and other memory issues.

Actions
Copy link

Also available in: Atom PDF