Actions
Bug #5850
closedframes: Assertion failed: buffer initialized
Affected Versions:
Effort:
Difficulty:
Label:
Description
Files
Actions
Added by Philippe Antoine almost 3 years ago. Updated almost 3 years ago.
Description
Files
| repro2.pcap (5.32 KB) repro2.pcap | Philippe Antoine, 02/03/2023 05:04 PM | ||
| repro.rules (296 Bytes) repro.rules | Philippe Antoine, 02/03/2023 05:06 PM |
./src/suricata -S repro.rules -k none -c suricata.yaml --set stream.midstream=true -r repro2.pcap gets the assertion triggered
alert smb any any -> any any (flow:to_server; frame:smb2.data; content:!"|FE|SMB"; startswith; sid:6;)
alert dcerpc any any -> any any (flow:to_server; dcerpc.iface:367abb81-9844-35f1-ad32-98f038001003; dcerpc.opnum:15; sid:3;)
The first rule make redmine go 500