Actions
Security #5028
closedsmtp: GetLine function buffers data indefinitely if 0x0a was not found in the frag'd input
Affected Versions:
Label:
CVE:
Git IDs:
412b77cc8c970fedc3b13bb24ad4af88eb65a631
Severity:
MODERATE
Disclosure Date:
Description
The code we tend to execute is
SCReturnStruct(APP_LAYER_INCOMPLETE(state->consumed, state->input_len + 1));
indefinitely.
Updated by Shivani Bhardwaj about 3 years ago
- Assignee changed from Shivani Bhardwaj to Jeff Lucovsky
The fix will have to be backported from 6.0.x and not master
Actions