Security #6493: ip defrag: several issues with overlap handling - Suricata - Open Information Security Foundation

Actions

Copy link

Security #6493

closed

ip defrag: several issues with overlap handling

Added by Victor Julien over 1 year ago. Updated about 13 hours ago.

Status:

Closed

Priority:

Normal

Assignee:

Jason Ish

Target version:

8.0.0-beta1

Affected Versions:

Label:

CVE:

Git IDs:

Severity:

MODERATE

Disclosure Date:

02/06/2024

Description

Tracking issue for report highlighting several issues in ip-defrag. Please create sub-tickets for the individual issues.

Severity TBD at this point.

Subtasks 9 (0 open — 9 closed)

Security #6668: ip defrag: final overlapping packet can lead to "hole" in re-assembled data	Closed	Jason Ish	Actions
Security #6671: ip defrag: final overlapping packet can lead to "hole" in re-assembled data (6.0.x backport)	Closed	Jason Ish	Actions
Security #6673: ip defrag: final overlapping packet can lead to "hole" in re-assembled data (7.0.x backport)	Closed	Jason Ish	Actions
Security #6669: ip defrag: re-assembly error in bsd policy	Closed	Jason Ish	Actions
Security #6670: ip defrag: re-assembly error in bsd policy (6.0.x backport)	Closed	Jason Ish	Actions
Security #6672: ip defrag: re-assembly error in bsd policy (7.0.x backport)	Closed	Jason Ish	Actions
Security #6675: ip-defrag: packet can be considered complete even with holes	Closed	Jason Ish	Actions
Security #6676: ip-defrag: packet can be considered complete even with holes (6.0.x backport)	Closed	Jason Ish	Actions
Security #6677: ip-defrag: packet can be considered complete even with holes (7.0.x backport)	Closed	Jason Ish	Actions

Actions

Copy link

Updated by OISF Ticketbot over 1 year ago

Subtask #6494 added

Actions

Copy link

Updated by OISF Ticketbot over 1 year ago

Label deleted (~~Needs backport to 6.0~~)

Actions

Copy link

Updated by Victor Julien over 1 year ago

Target version changed from 7.0.3 to 8.0.0-beta1
Label Needs backport to 7.0 added

Actions

Copy link

Updated by OISF Ticketbot over 1 year ago

Subtask #6518 added

Actions

Copy link

Updated by OISF Ticketbot over 1 year ago

Label deleted (~~Needs backport to 7.0~~)

Actions

Copy link

Updated by Victor Julien over 1 year ago

Disclosure Date set to 02/06/2024

Actions

Copy link

Updated by Victor Julien over 1 year ago

Severity MODERATE as it depends on host-os-policy that most ppl don't touch. Setups using AF_PACKET generally use defrag handling by the Linux kernel.

Actions

Copy link