Project

General

Profile

Actions
Copy link

Bug #4317

closed
JL

invalid dsize distance rule being loaded by suricata (6.0.x backport)

Bug #4317: invalid dsize distance rule being loaded by suricata (6.0.x backport)

Added by Jeff Lucovsky about 5 years ago. Updated about 2 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

The following rule, originally submitted under issue #317 is being loaded successfully but doesn't seem like it should be.

alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/distance INVALID combination "; dsize:10; content:"boom"; content:"loom"; distance:10; sid:6666663; rev:1;)

Related issues 1 (0 open — 1 closed)

Follows Suricata - Bug #2982: invalid dsize distance rule being loaded by suricataClosedJeff LucovskyActions

JL Updated by Jeff Lucovsky about 5 years ago Actions
Copy link
 #1

  • Copied from Bug #2982: invalid dsize distance rule being loaded by suricata added

JL Updated by Jeff Lucovsky about 5 years ago Actions
Copy link
 #2

  • Label deleted (Needs backport)

VJ Updated by Victor Julien about 5 years ago Actions
Copy link
 #3

  • Target version changed from 6.0.2 to 6.0.3

VJ Updated by Victor Julien almost 5 years ago Actions
Copy link
 #4

  • Target version changed from 6.0.3 to 6.0.4

VJ Updated by Victor Julien over 4 years ago Actions
Copy link
 #5

  • Target version changed from 6.0.4 to 6.0.5

VJ Updated by Victor Julien about 4 years ago Actions
Copy link
 #6

  • Target version changed from 6.0.5 to 6.0.6

VJ Updated by Victor Julien almost 4 years ago Actions
Copy link
 #7

  • Target version changed from 6.0.6 to 6.0.7

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #8

  • Target version changed from 6.0.7 to 6.0.8

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #9

  • Target version changed from 6.0.8 to 6.0.9

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #10

  • Subject changed from invalid dsize distance rule being loaded by suricata to invalid dsize distance rule being loaded by suricata (6.0.x backport)

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #11

  • Parent task set to #2982

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #12

  • Target version changed from 6.0.9 to 6.0.10

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #13

  • Assignee changed from Shivani Bhardwaj to Jeff Lucovsky

JL Updated by Jeff Lucovsky over 3 years ago Actions
Copy link
 #14

  • Status changed from Assigned to In Review

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #15

  • Target version changed from 6.0.10 to 6.0.11

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #16

  • Parent task deleted (#2982)

VJ Updated by Victor Julien about 3 years ago Actions
Copy link
 #17

  • Target version changed from 6.0.11 to 6.0.12

Needs to be forgiving wrt loading broken rules to avoid upgrade issues, see https://github.com/OISF/suricata/pull/8245

VJ Updated by Victor Julien almost 3 years ago Actions
Copy link
 #18

  • Status changed from In Review to Assigned
  • Target version changed from 6.0.12 to 6.0.13

Moving back to "assigned" as it seems we've stalled on this.

VJ Updated by Victor Julien almost 3 years ago Actions
Copy link
 #19

  • Target version changed from 6.0.13 to 6.0.14

VJ Updated by Victor Julien over 2 years ago Actions
Copy link
 #20

  • Target version changed from 6.0.14 to 6.0.15

JL Updated by Jeff Lucovsky over 2 years ago Actions
Copy link
 #21

  • Precedes Bug #2982: invalid dsize distance rule being loaded by suricata added

JL Updated by Jeff Lucovsky over 2 years ago Actions
Copy link
 #22

  • Precedes deleted (Bug #2982: invalid dsize distance rule being loaded by suricata)

JL Updated by Jeff Lucovsky over 2 years ago Actions
Copy link
 #23

  • Follows Bug #2982: invalid dsize distance rule being loaded by suricata added

VJ Updated by Victor Julien over 2 years ago Actions
Copy link
 #24

  • Target version changed from 6.0.15 to 6.0.16

VJ Updated by Victor Julien about 2 years ago Actions
Copy link
 #25

  • Target version changed from 6.0.16 to 6.0.17

VJ Updated by Victor Julien about 2 years ago Actions
Copy link
 #26

  • Status changed from Assigned to Rejected
  • Assignee deleted (Jeff Lucovsky)
  • Target version deleted (6.0.17)

Rejecting as 6.0.x is now in extended support and EOL in 6 months.

Actions
Copy link

Also available in: PDF Atom