Task #4841: tracking: research evasions wrt malformed IP and TCP options - Suricata - Open Information Security Foundation

Actions

Copy link

Task #4841

open

tracking: research evasions wrt malformed IP and TCP options

Added by Victor Julien about 3 years ago. Updated 5 months ago.

Status:

New

Priority:

Normal

Assignee:

Community Ticket

Target version:

TBD

Effort:

Difficulty:

Label:

Description

Various decoder check for all kinds of anomalies in the headers. Some of them lead to an event, others to an event + the PKT_IS_INVALID flags. This needs review and testing, as its easy to imagine a mismatch between our handling and handling of such packets by the receiving OS.