Project

General

Profile

Actions
Copy link

Bug #2982

closed

invalid dsize distance rule being loaded by suricata

Added by Jason Taylor almost 4 years ago. Updated about 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
7.0.0-rc1
Affected Versions:
5.0beta1
Effort:
Difficulty:
Label:
Needs backport

Description

The following rule, originally submitted under issue #317 is being loaded successfully but doesn't seem like it should be.

alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/distance INVALID combination "; dsize:10; content:"boom"; content:"loom"; distance:10; sid:6666663; rev:1;)

Related issues 2 (0 open — 2 closed)

Related to Bug #317: Invalid Rules ClosedJason TaylorActions
Copied to Bug #4316: invalid dsize distance rule being loaded by suricataRejectedJeff LucovskyActions
Actions
Copy link
 #1

Updated by Jason Taylor almost 4 years ago

  • Related to Bug #317: Invalid Rules added
Actions
Copy link
 #2

Updated by Andreas Herz almost 4 years ago

  • Assignee set to Jason Taylor
  • Target version set to TBD
Actions
Copy link
 #3

Updated by Victor Julien over 2 years ago

  • Status changed from New to Assigned
  • Assignee changed from Jason Taylor to Jeff Lucovsky
  • Target version changed from TBD to 7.0.0-beta1
  • Label Needs backport added
Actions
Copy link
 #4

Updated by Jeff Lucovsky about 2 years ago

  • Copied to Bug #4316: invalid dsize distance rule being loaded by suricata added
Actions
Copy link
 #5

Updated by Jeff Lucovsky about 2 years ago

  • Copied to Bug #4317: invalid dsize distance rule being loaded by suricata (6.0.x backport) added
Actions
Copy link
 #6

Updated by Jeff Lucovsky about 2 years ago

  • Status changed from Assigned to In Review
Actions
Copy link
 #7

Updated by Victor Julien 5 months ago

  • Target version changed from 7.0.0-beta1 to 7.0.0-rc1
Actions
Copy link
 #8

Updated by Victor Julien 4 months ago

  • Subtask #4317 added
Actions
Copy link
 #9

Updated by Jeff Lucovsky 4 months ago

  • Status changed from In Review to Resolved
Actions
Copy link
 #10

Updated by Victor Julien about 2 months ago

  • Subtask deleted (#4317)
Actions
Copy link
 #11

Updated by Victor Julien about 2 months ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF