Project

General

Profile

Actions
Copy link

Bug #4317

open

invalid dsize distance rule being loaded by suricata (6.0.x backport)

Added by Jeff Lucovsky over 2 years ago. Updated 29 days ago.

Status:
Assigned
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
6.0.13
Affected Versions:
Effort:
Difficulty:
Label:

Description

The following rule, originally submitted under issue #317 is being loaded successfully but doesn't seem like it should be.

alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/distance INVALID combination "; dsize:10; content:"boom"; content:"loom"; distance:10; sid:6666663; rev:1;)

Actions
Copy link
 #1

Updated by Jeff Lucovsky over 2 years ago

  • Copied from Bug #2982: invalid dsize distance rule being loaded by suricata added
Actions
Copy link
 #2

Updated by Jeff Lucovsky over 2 years ago

  • Label deleted (Needs backport)
Actions
Copy link
 #3

Updated by Victor Julien over 2 years ago

  • Target version changed from 6.0.2 to 6.0.3
Actions
Copy link
 #4

Updated by Victor Julien almost 2 years ago

  • Target version changed from 6.0.3 to 6.0.4
Actions
Copy link
 #5

Updated by Victor Julien over 1 year ago

  • Target version changed from 6.0.4 to 6.0.5
Actions
Copy link
 #6

Updated by Victor Julien about 1 year ago

  • Target version changed from 6.0.5 to 6.0.6
Actions
Copy link
 #7

Updated by Victor Julien about 1 year ago

  • Target version changed from 6.0.6 to 6.0.7
Actions
Copy link
 #8

Updated by Victor Julien 8 months ago

  • Target version changed from 6.0.7 to 6.0.8
Actions
Copy link
 #9

Updated by Victor Julien 8 months ago

  • Target version changed from 6.0.8 to 6.0.9
Actions
Copy link
 #10

Updated by Victor Julien 7 months ago

  • Subject changed from invalid dsize distance rule being loaded by suricata to invalid dsize distance rule being loaded by suricata (6.0.x backport)
Actions
Copy link
 #11

Updated by Victor Julien 7 months ago

  • Parent task set to #2982
Actions
Copy link
 #12

Updated by Victor Julien 6 months ago

  • Target version changed from 6.0.9 to 6.0.10
Actions
Copy link
 #13

Updated by Victor Julien 6 months ago

  • Assignee changed from Shivani Bhardwaj to Jeff Lucovsky
Actions
Copy link
 #14

Updated by Jeff Lucovsky 6 months ago

  • Status changed from Assigned to In Review
Actions
Copy link
 #15

Updated by Victor Julien 4 months ago

  • Target version changed from 6.0.10 to 6.0.11
Actions
Copy link
 #16

Updated by Victor Julien 4 months ago

  • Parent task deleted (#2982)
Actions
Copy link
 #17

Updated by Victor Julien 2 months ago

  • Target version changed from 6.0.11 to 6.0.12

Needs to be forgiving wrt loading broken rules to avoid upgrade issues, see https://github.com/OISF/suricata/pull/8245

Actions
Copy link
 #18

Updated by Victor Julien 29 days ago

  • Status changed from In Review to Assigned
  • Target version changed from 6.0.12 to 6.0.13

Moving back to "assigned" as it seems we've stalled on this.

Actions
Copy link

Also available in: Atom PDF