Project

General

Profile

Actions

Bug #7814

open

detect/entropy: entropy values can be overwritten

Added by Jeff Lucovsky 28 days ago. Updated 24 days ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

Entropy values are stored as flow variables with a name formed from the anchoring sticky buffer. When multiple rules use entropy with the same sticky buffer, values will be stored in a single variable (only one value is stored).

Unique names should be used to avoid overwriting values by combining a per-rule value with the sticky buffer, such as the signature id.

Actions #1

Updated by Philippe Antoine 24 days ago

  • Affected Versions 8.0.0 added
  • Affected Versions deleted (8.0.1)
Actions

Also available in: Atom PDF