Project

General

Profile

Actions
Copy link

Bug #7771

open

Bug #7638: detect: incorrect rule ordering with more complex flowbit chains

flowbits: cyclic dependencies in flowbits are accepted by the engine

Added by Shivani Bhardwaj 23 days ago. Updated 12 days ago.

Status:
Assigned
Priority:
High
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
high
Label:

Description

For example, rules like


alert http any any -> any any (http.user_agent; content:"Mozilla"; flowbits:isset, headtest; flowbits:set,moz; sid:10;)
alert http any any -> any any (http.method; content:"GET"; flowbits:set,headtest; flowbits:isset,moz; sid:12;)

Actions
Copy link

Also available in: Atom PDF