Project

General

Profile

Actions

Security #8768

closed
PA PA

datasets: buffer overread with too small hashes

Security #8768: datasets: buffer overread with too small hashes

Added by Philippe Antoine 30 days ago. Updated about 1 hour ago.

Status:
Closed
Priority:
Normal
Target version:
Affected Versions:
Label:
CVE:
Git IDs:
Severity:
LOW
Disclosure Date:

Description

Stack trace

==41732==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200003a998 at pc 0x00010714dae8 bp 0x00016bc44050 sp 0x00016bc43800
READ of size 16 at 0x60200003a998 thread T0
    #0 0x00010714dae4 in __asan_memcpy+0x3e4 (libclang_rt.asan_osx_dynamic.dylib:arm64+0x51ae4)
    #1 0x000104374e4c in DatasetAddMd5wRep datasets.c:1288
    #2 0x000104374e4c in SCDatasetAddwRep datasets.c:1364
    #3 0x000104fba7d8 in _RNvNtNtCsC2YvdbiCrX_8suricata6detect8datasets15process_md5_set datasets.rs:160
    #4 0x000104fba7d8 in ParseDatasets datasets.rs:95
    #5 0x00010436ad40 in DatasetLoadMd5 datasets.c:221
    #6 0x00010436ad40 in DatasetGet datasets.c:477
    #7 0x0001044a68b4 in DetectDatarepSetup detect-datarep.c:336
    #8 0x0001047e97ac in SigParseOptions detect-parse.c:1074
    #9 0x0001047e97ac in SigParse detect-parse.c:2125
    #10 0x0001047e259c in SigInitHelper detect-parse.c:3267
    #11 0x0001047d3d58 in SigInitDo detect-parse.c:3414
    #12 0x0001047da528 in SigInit detect-parse.c:3457
    #13 0x0001047da528 in DetectEngineAppendSig detect-parse.c:3804
    #14 0x000104585b40 in DetectLoadSigFile detect-engine-loader.c:186
    #15 0x00010457ffb4 in ProcessSigFiles detect-engine-loader.c:280
    #16 0x00010457de34 in SigLoadSignatures detect-engine-loader.c:453
    #17 0x000104bdfe14 in LoadSignatures suricata.c:2581
    #18 0x000104bdfe14 in PostConfLoadedDetectSetup suricata.c:2732
    #19 0x000104be4bf0 in SuricataInit suricata.c:3173
    #20 0x0001041a4e28 in main main.c:57

Low severity like #8624

Found by fuzz target from #3590


Subtasks 1 (0 open1 closed)

Security #8769: datasets: buffer overread with too small hashes (8.0.x backport)ClosedPhilippe AntoineActions

Related issues 2 (1 open1 closed)

Related to Suricata - Optimization #3590: fuzz: target for dataset/datarep filesIn ProgressPhilippe AntoineActions
Copied from Suricata - Security #8624: datasets: NULL dereference on unexpected ndjson filesClosedPhilippe AntoineActions

PA Updated by Philippe Antoine 30 days ago Actions #1

  • Copied from Security #8624: datasets: NULL dereference on unexpected ndjson files added

OT Updated by OISF Ticketbot 30 days ago Actions #2

  • Subtask #8769 added

OT Updated by OISF Ticketbot 30 days ago Actions #3

  • Label deleted (Needs backport to 8.0)

PA Updated by Philippe Antoine 30 days ago Actions #4

PA Updated by Philippe Antoine 30 days ago Actions #5

  • Private changed from No to Yes

PA Updated by Philippe Antoine 26 days ago Actions #6

  • Status changed from Assigned to In Review

Gitlab MR

VJ Updated by Victor Julien 16 days ago Actions #7

Also reported by Communications Security Establishment (CSE), see #8854.

JI Updated by Jason Ish 6 days ago Actions #9

  • GHSA set to GHSA-mwvg-xm2v-w8wr

JI Updated by Jason Ish 1 day ago Actions #11

  • Private changed from Yes to No

PA Updated by Philippe Antoine about 22 hours ago Actions #12

  • Status changed from In Review to Resolved

PA Updated by Philippe Antoine about 1 hour ago Actions #13

  • Status changed from Resolved to Closed
Actions

Also available in: PDF Atom