Actions
Security #8768
closed
PA
PA
datasets: buffer overread with too small hashes
Security #8768:
datasets: buffer overread with too small hashes
Affected Versions:
Label:
CVE:
Git IDs:
Description
Stack trace
==41732==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200003a998 at pc 0x00010714dae8 bp 0x00016bc44050 sp 0x00016bc43800
READ of size 16 at 0x60200003a998 thread T0
#0 0x00010714dae4 in __asan_memcpy+0x3e4 (libclang_rt.asan_osx_dynamic.dylib:arm64+0x51ae4)
#1 0x000104374e4c in DatasetAddMd5wRep datasets.c:1288
#2 0x000104374e4c in SCDatasetAddwRep datasets.c:1364
#3 0x000104fba7d8 in _RNvNtNtCsC2YvdbiCrX_8suricata6detect8datasets15process_md5_set datasets.rs:160
#4 0x000104fba7d8 in ParseDatasets datasets.rs:95
#5 0x00010436ad40 in DatasetLoadMd5 datasets.c:221
#6 0x00010436ad40 in DatasetGet datasets.c:477
#7 0x0001044a68b4 in DetectDatarepSetup detect-datarep.c:336
#8 0x0001047e97ac in SigParseOptions detect-parse.c:1074
#9 0x0001047e97ac in SigParse detect-parse.c:2125
#10 0x0001047e259c in SigInitHelper detect-parse.c:3267
#11 0x0001047d3d58 in SigInitDo detect-parse.c:3414
#12 0x0001047da528 in SigInit detect-parse.c:3457
#13 0x0001047da528 in DetectEngineAppendSig detect-parse.c:3804
#14 0x000104585b40 in DetectLoadSigFile detect-engine-loader.c:186
#15 0x00010457ffb4 in ProcessSigFiles detect-engine-loader.c:280
#16 0x00010457de34 in SigLoadSignatures detect-engine-loader.c:453
#17 0x000104bdfe14 in LoadSignatures suricata.c:2581
#18 0x000104bdfe14 in PostConfLoadedDetectSetup suricata.c:2732
#19 0x000104be4bf0 in SuricataInit suricata.c:3173
#20 0x0001041a4e28 in main main.c:57
Low severity like #8624
Found by fuzz target from #3590
PA Updated by Philippe Antoine 29 days ago
- Copied from Security #8624: datasets: NULL dereference on unexpected ndjson files added
OT Updated by OISF Ticketbot 29 days ago
- Subtask #8769 added
OT Updated by OISF Ticketbot 29 days ago
- Label deleted (
Needs backport to 8.0)
PA Updated by Philippe Antoine 29 days ago
- Related to Optimization #3590: fuzz: target for dataset/datarep files added
PA Updated by Philippe Antoine 29 days ago
- Private changed from No to Yes
PA Updated by Philippe Antoine 26 days ago
- Status changed from Assigned to In Review
Gitlab MR
VJ Updated by Victor Julien 16 days ago
Also reported by Communications Security Establishment (CSE), see #8854.
PA Updated by Philippe Antoine 1 day ago
PA Updated by Philippe Antoine about 21 hours ago
- Status changed from In Review to Resolved
PA Updated by Philippe Antoine 13 minutes ago
- Status changed from Resolved to Closed
Actions