Project

General

Profile

Actions
Copy link

Security #5023

closed
SB SB

smtp: GetLine function buffers data indefinitely if 0x0a was not found int the frag'd input

Security #5023: smtp: GetLine function buffers data indefinitely if 0x0a was not found int the frag'd input

Added by Shivani Bhardwaj about 4 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
7.0.0-beta1
Affected Versions:
Label:
CVE:
Git IDs:

57a7cf7a0bcc9140a326c91a21e5d21fd2236f49
078c251deacc78b8abb40c5ab89d19c29e31bdf8
cf749fd450ca41dc001c2a1c10d8d17500dcedce
6e800a8548d9d2699589cac6afca3c0fa7613202
e7417a8e96fcd23fa9e3b529d7c2bbd7b3efb928

Severity:
HIGH
Disclosure Date:

Description

The code we tend to execute is

SCReturnStruct(APP_LAYER_INCOMPLETE(state->consumed, state->input_len + 1));

indefinitely.

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Security #5027: smtp: GetLine function buffers data indefinitely if 0x0a was not found int the frag'd inputClosedShivani BhardwajActions
Copied to Suricata - Security #5028: smtp: GetLine function buffers data indefinitely if 0x0a was not found in the frag'd inputClosedShivani BhardwajActions

SB Updated by Shivani Bhardwaj about 4 years ago Actions
Copy link
 #1

  • Description updated (diff)

SB Updated by Shivani Bhardwaj about 4 years ago Actions
Copy link
 #2

  • Copied to Security #5027: smtp: GetLine function buffers data indefinitely if 0x0a was not found int the frag'd input added

SB Updated by Shivani Bhardwaj about 4 years ago Actions
Copy link
 #3

  • Copied to Security #5028: smtp: GetLine function buffers data indefinitely if 0x0a was not found in the frag'd input added

VJ Updated by Victor Julien about 4 years ago Actions
Copy link
 #4

  • Tracker changed from Bug to Security
  • Severity set to HIGH

SB Updated by Shivani Bhardwaj almost 4 years ago Actions
Copy link
 #5

  • Status changed from Assigned to In Review

VJ Updated by Victor Julien almost 4 years ago Actions
Copy link
 #6

  • Status changed from In Review to Closed
  • Git IDs updated (diff)

VJ Updated by Victor Julien over 3 years ago Actions
Copy link
 #7

  • Private changed from Yes to No
  • Label deleted (Needs backport to 5.0, Needs backport to 6.0)
Actions
Copy link

Also available in: PDF Atom