Project

General

Profile

Actions
Copy link

Security #8922

closed
OT VJ

detect/inspect: infinite loop with too large response-body-limit and stream.reassembly.depth (8.0.x backport)

Security #8922: detect/inspect: infinite loop with too large response-body-limit and stream.reassembly.depth (8.0.x backport)

Added by OISF Ticketbot 2 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
8.0.7
Affected Versions:
Label:
CVE:
Git IDs:

fcf51f540f8ced9fb57ee3a9a58d05691de07e25

Severity:
MODERATE
Disclosure Date:
11/02/2026
GHSA:
GHSA-rvm5-vgrc-j5rx

JI Updated by Jason Ish 2 months ago Actions
Copy link
 #1

  • GHSA set to GHSA-rvm5-vgrc-j5rx

JI Updated by Jason Ish 2 months ago Actions
Copy link
 #2

  • Severity set to LOW

Apply severity from parent ticket: LOW.

SB Updated by Shivani Bhardwaj about 2 months ago Actions
Copy link
 #3

  • Subject changed from detect: SCInspectionBufferCheckAndExpand() size-doubling loop can wrap uint32_t and spin forever (8.0.x backport) to detect/inspect: infinite loop with too large response-body-limit and stream.reassembly.depth (8.0.x backport)

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #5

  • Disclosure Date set to 11/02/2026

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #6

  • Status changed from Assigned to Resolved

Staged.

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #7

  • Severity changed from LOW to MODERATE

Apply severity from parent ticket: MODERATE.

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #8

  • Git IDs updated (diff)

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #9

  • Status changed from Resolved to Closed

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #10

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom