Project

General

Profile

Actions
Copy link

Bug #3857

closed
VJ PA

Protocol detection evasion by packet splitting on enip/dnp3

Bug #3857: Protocol detection evasion by packet splitting on enip/dnp3

Added by Victor Julien over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
6.0.0
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport, Needs backport to 4.1, Needs backport to 5.0

Description

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24601

./src/fuzz_applayerprotodetectgetproto ~/Downloads/clusterfuzz-testcase-minimized-fuzz_applayerprotodetectgetproto-5683474829410304
Assertion failure : With input length 24, found enip instead of dnp3
Aborted

Files

clusterfuzz-testcase-minimized-fuzz_applayerprotodetectgetproto-5683474829410304 (31 Bytes) clusterfuzz-testcase-minimized-fuzz_applayerprotodetectgetproto-5683474829410304 Victor Julien, 08/04/2020 05:28 AM

Related issues 3 (0 open — 3 closed)

Related to Suricata - Bug #3689: Protocol detection evasion by packet splitting on enip/nfsClosedPhilippe AntoineActions
Copied to Suricata - Bug #3939: Protocol detection evasion by packet splitting on enip/dnp3ClosedShivani BhardwajActions
Copied to Suricata - Bug #3940: Protocol detection evasion by packet splitting on enip/dnp3ClosedPhilippe AntoineActions

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #1

  • Related to Bug #3689: Protocol detection evasion by packet splitting on enip/nfs added

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #2

  • Assignee set to OISF Dev

PA Updated by Philippe Antoine over 5 years ago Actions
Copy link
 #3

  • Status changed from New to In Review
  • Assignee changed from OISF Dev to Philippe Antoine

Gitlab PR

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #4

  • Target version changed from 6.0.0rc1 to 6.0.0

JL Updated by Jeff Lucovsky over 5 years ago Actions
Copy link
 #5

  • Copied to Bug #3939: Protocol detection evasion by packet splitting on enip/dnp3 added

JL Updated by Jeff Lucovsky over 5 years ago Actions
Copy link
 #6

  • Copied to Bug #3940: Protocol detection evasion by packet splitting on enip/dnp3 added

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #7

  • Status changed from In Review to Closed

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #8

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom