Actions
Security #6195
closedprocess exit in hyperscan error handling
Affected Versions:
Label:
CVE:
Git IDs:
Severity:
HIGH
Disclosure Date:
Description
A malformed rule can cause the process to exit due to hyperscan integration triggering a fatal error if hyperscan can't compile a pattern.
This can happen during a rule upgrade, which would exit the process. The process could then not start back up again until the offending rule is removed.
The issue would be mitigated by using a "test" step in the rule upgrade process. In this case the ruleset update would be rejected.
Actions