Suricata

DHCP options 51, 58, and 59 contain four-byte time values, but the parser ignores their length byte and always consumes four bytes.
Malformed options with lengths other than four can therefore desynchronize option parsing and produce false matches for dhcp.leasetime, dhcp.renewal_time, or dhcp.rebinding_time.
The parser should reject these options unless their declared length is exactly four.