Project

General

Custom queries

Profile

Actions
Copy link

Security #6931

closed

Security #6902: base64: off-by-three overflow in DecodeBase64()

base64: off-by-three overflow in DecodeBase64() (6.0.x backport)

Added by OISF Ticketbot 12 months ago. Updated 11 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
6.0.19
Affected Versions:
Label:
CVE:
2024-32664
Git IDs:
Severity:
CRITICAL
Disclosure Date:
Actions
Copy link
 #1

Updated by Victor Julien 12 months ago

  • Severity changed from MODERATE to CRITICAL
Actions
Copy link
 #2

Updated by Philippe Antoine 12 months ago

Severity is critical in master6, and not in later branches, because the limited overflow can overwrite different fields (in the case suricata was not built with NSS) and these fields which get used in the default configuration

Actions
Copy link
 #3

Updated by Victor Julien 11 months ago

  • Status changed from Assigned to Resolved
Actions
Copy link
 #4

Updated by Victor Julien 11 months ago

  • CVE set to 2024-32664
Actions
Copy link
 #5

Updated by Victor Julien 11 months ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF