Project

General

Profile

Actions

Bug #5192

closed

SSL : over allocation for certificates

Added by Shivani Bhardwaj 7 months ago. Updated 6 months ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Found by Coverity

Untrusted allocation size (TAINTED_SCALAR)

in curr_connp->trec = SCMalloc(curr_connp->trec_len); where trec_len is a u24 read from the network, so suricata can call malloc with up to 16Mbytes even if there is no data yet to fill them...


Related issues 1 (0 open1 closed)

Copied from Bug #5188: SSL : over allocation for certificatesClosedPhilippe AntoineActions
Actions #1

Updated by Shivani Bhardwaj 7 months ago

  • Copied from Bug #5188: SSL : over allocation for certificates added
Actions #2

Updated by Shivani Bhardwaj 6 months ago

  • Status changed from Assigned to In Review
Actions #3

Updated by Shivani Bhardwaj 6 months ago

  • Status changed from In Review to Closed
Actions

Also available in: Atom PDF