Bug #5193: SSL : over allocation for certificates - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #5193

closed

SSL : over allocation for certificates

Added by Shivani Bhardwaj almost 3 years ago. Updated over 2 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Jeff Lucovsky

Target version:

5.0.9

Affected Versions:

6.0.4

Effort:

Difficulty:

Label:

Description

Found by Coverity

Untrusted allocation size (TAINTED_SCALAR)

in curr_connp->trec = SCMalloc(curr_connp->trec_len); where trec_len is a u24 read from the network, so suricata can call malloc with up to 16Mbytes even if there is no data yet to fill them...

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Shivani Bhardwaj almost 3 years ago

Copied from Bug #5188: SSL : over allocation for certificates added

Actions

Copy link

Updated by Shivani Bhardwaj almost 3 years ago

Label deleted (~~Needs backport, Needs backport to 5.0, Needs backport to 6.0~~)

Actions

Copy link

Updated by Jeff Lucovsky over 2 years ago

Status changed from Assigned to In Progress

Cherry-pick commit(s):
- 862e84877ff262cd4b8c4b191a8710f94f63fcf7
- 3ed188e0bc Validation macros only
- d1ada2e13c207e0937f8a4818d5731d319f5fa07

Actions

Copy link