Actions
Security #5187
closed
JI
VJ
Rust regex crate security advisory CVE-2022-24713
Security #5187:
Rust regex crate security advisory CVE-2022-24713
Severity:
LOW
Disclosure Date:
GHSA:
Description
Reference: https://blog.rust-lang.org/2022/03/08/cve-2022-24713.html
Summery: A complex regular expression could lead to a denial of service in the Rust regex crate. regex versions up to 1.5.4 are affectged. Fix is in regex 1.5.5.
This crate is not used in Suricata 5 or 6, only in git master. And no untrusted regular expressions are processed so there is no risk to Suricata, however, we should update to the latest version in git master as it does show up in cargo audit.
Actions