Project

General

Profile

Actions
Copy link

Security #7209

closed

thash: random factor not used; possible abusive hash collisions

Added by Jason Ish 10 months ago. Updated 8 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Affected Versions:
7.0.6, git master
Label:
CVE:
2024-47187
Git IDs:

26da953f6dad3793d29f27ce7ab6628a2db8f471

Severity:
CRITICAL
Disclosure Date:

Description

util-thash.c initializes a random factor, however, this is not used. I suspect the intention was to introduce some randomness.

Subtasks 1 (0 open — 1 closed)

Security #7258: thash: random factor not used; possible abusive hash collisions (7.0.x backport)ClosedPhilippe AntoineActions

Related issues 2 (1 open — 1 closed)

Related to Suricata - Optimization #3322: Use standard CRC32 for hash-like functionsNewCommunity TicketActions
Related to Suricata - Security #7289: http: missing hashtable random seed leads to potential DoSClosedPhilippe AntoineActions
Actions
Copy link
 #1

Updated by Philippe Antoine 10 months ago

cf usage of StringHashDjb2 in ContainerUrlRangeHash, network traffic induced

Actions
Copy link
 #3

Updated by Victor Julien 8 months ago

  • Label Needs backport to 7.0 added
Actions
Copy link
 #4

Updated by Victor Julien 8 months ago

  • Target version changed from TBD to 8.0.0-beta1
Actions
Copy link
 #5

Updated by OISF Ticketbot 8 months ago

  • Subtask #7258 added
Actions
Copy link
 #6

Updated by OISF Ticketbot 8 months ago

  • Label deleted (Needs backport to 7.0)
Actions
Copy link
 #7

Updated by Philippe Antoine 8 months ago

git grep 5381 shows a lot of redefinition of StringHashDjb2

Actions
Copy link
 #8

Updated by Philippe Antoine 8 months ago

  • Status changed from New to In Review

Gitlab POC

Actions
Copy link
 #9

Updated by Philippe Antoine 8 months ago

Actions
Copy link
 #10

Updated by Victor Julien 8 months ago

  • Tracker changed from Bug to Security
  • Assignee changed from OISF Dev to Philippe Antoine
  • Severity set to CRITICAL
Actions
Copy link
 #11

Updated by Juliana Fajardini Reichow 8 months ago

  • Related to Security #7289: http: missing hashtable random seed leads to potential DoS added
Actions
Copy link
 #14

Updated by Philippe Antoine 8 months ago

  • Git IDs updated (diff)
Actions
Copy link
 #15

Updated by Victor Julien 8 months ago

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF