Project

General

Profile

Actions

Security #5028

closed

smtp: GetLine function buffers data indefinitely if 0x0a was not found in the frag'd input

Added by Shivani Bhardwaj almost 3 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Label:
CVE:
Git IDs:

412b77cc8c970fedc3b13bb24ad4af88eb65a631

Severity:
MODERATE
Disclosure Date:

Description

The code we tend to execute is

SCReturnStruct(APP_LAYER_INCOMPLETE(state->consumed, state->input_len + 1));

indefinitely.


Related issues 1 (0 open1 closed)

Copied from Suricata - Security #5023: smtp: GetLine function buffers data indefinitely if 0x0a was not found int the frag'd inputClosedShivani BhardwajActions
Actions

Also available in: Atom PDF