Project

General

Custom queries

Profile

Actions
Copy link

Security #7268

closed

Security #7267: ja4: non alphanumeric characters in alpn lead to panic

ja4: non alphanumeric characters in alpn lead to panic (7.0.x backport)

Added by OISF Ticketbot 8 months ago. Updated 7 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
7.0.7
Affected Versions:
Label:
CVE:
2024-47522
Git IDs:

34a46251564d7d793c93ae09cffdc2c2712164bb

Severity:
HIGH
Disclosure Date:
Actions
Copy link
 #1

Updated by Victor Julien 8 months ago

  • Severity changed from MODERATE to HIGH

HIGH as crash, but since ja4 is disabled by default it's not critical.

Actions
Copy link

Also available in: Atom PDF