Actions
Security #8768
closed
PA
PA
datasets: buffer overread with too small hashes
Security #8768:
datasets: buffer overread with too small hashes
Affected Versions:
Label:
CVE:
Git IDs:
Description
Stack trace
==41732==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200003a998 at pc 0x00010714dae8 bp 0x00016bc44050 sp 0x00016bc43800
READ of size 16 at 0x60200003a998 thread T0
#0 0x00010714dae4 in __asan_memcpy+0x3e4 (libclang_rt.asan_osx_dynamic.dylib:arm64+0x51ae4)
#1 0x000104374e4c in DatasetAddMd5wRep datasets.c:1288
#2 0x000104374e4c in SCDatasetAddwRep datasets.c:1364
#3 0x000104fba7d8 in _RNvNtNtCsC2YvdbiCrX_8suricata6detect8datasets15process_md5_set datasets.rs:160
#4 0x000104fba7d8 in ParseDatasets datasets.rs:95
#5 0x00010436ad40 in DatasetLoadMd5 datasets.c:221
#6 0x00010436ad40 in DatasetGet datasets.c:477
#7 0x0001044a68b4 in DetectDatarepSetup detect-datarep.c:336
#8 0x0001047e97ac in SigParseOptions detect-parse.c:1074
#9 0x0001047e97ac in SigParse detect-parse.c:2125
#10 0x0001047e259c in SigInitHelper detect-parse.c:3267
#11 0x0001047d3d58 in SigInitDo detect-parse.c:3414
#12 0x0001047da528 in SigInit detect-parse.c:3457
#13 0x0001047da528 in DetectEngineAppendSig detect-parse.c:3804
#14 0x000104585b40 in DetectLoadSigFile detect-engine-loader.c:186
#15 0x00010457ffb4 in ProcessSigFiles detect-engine-loader.c:280
#16 0x00010457de34 in SigLoadSignatures detect-engine-loader.c:453
#17 0x000104bdfe14 in LoadSignatures suricata.c:2581
#18 0x000104bdfe14 in PostConfLoadedDetectSetup suricata.c:2732
#19 0x000104be4bf0 in SuricataInit suricata.c:3173
#20 0x0001041a4e28 in main main.c:57
Low severity like #8624
Found by fuzz target from #3590
Actions