Project

General

Profile

Actions
Copy link

Bug #7771

open

Bug #7638: detect: incorrect rule ordering with more complex flowbit chains

flowbits: cyclic dependencies in flowbits are accepted by the engine

Added by Shivani Bhardwaj 22 days ago. Updated 11 days ago.

Status:
Assigned
Priority:
High
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
high
Label:

Description

For example, rules like


alert http any any -> any any (http.user_agent; content:"Mozilla"; flowbits:isset, headtest; flowbits:set,moz; sid:10;)
alert http any any -> any any (http.method; content:"GET"; flowbits:set,headtest; flowbits:isset,moz; sid:12;)

Actions
Copy link
 #1

Updated by Shivani Bhardwaj 22 days ago

  • Priority changed from Normal to High
Actions
Copy link
 #2

Updated by Shivani Bhardwaj 15 days ago

  • Difficulty set to high
Actions
Copy link
 #3

Updated by Shivani Bhardwaj 11 days ago

  • Target version changed from 8.0.0 to 9.0.0-beta1
Actions
Copy link

Also available in: Atom PDF