Bug #9217: http2: evasion via early progress on END_STREAM without END_HEADERS - Suricata - Open Information Security Foundation

Actions

Bug #9217

closed

PA PA

http2: evasion via early progress on END_STREAM without END_HEADERS

Bug #9217: http2: evasion via early progress on END_STREAM without END_HEADERS

Added by Philippe Antoine 27 days ago. Updated 15 days ago.

Status:

Closed

Priority:

Normal

Assignee:

Philippe Antoine

Target version:

Affected Versions:

Effort:

Difficulty:

Label:

Description

As found by AI https://github.com/OISF/suricata/pull/16436#discussion_r4263618652

Can lead to evasion/FN

Subtasks 1 (0 open — 1 closed)

Related issues 1 (0 open — 1 closed)

OT Updated by OISF Ticketbot 27 days ago Actions
Copy link
#1

Subtask #9218 added

OT Updated by OISF Ticketbot 27 days ago Actions
Copy link
#2

Label deleted (~~Needs backport to 8.0~~)

PA Updated by Philippe Antoine 27 days ago Actions
Copy link
#3

Related to Optimization #9209: http2: detect should not use &mut HTTP2Transaction added

PA Updated by Philippe Antoine 27 days ago Actions
Copy link
#4

Status changed from Assigned to In Review

https://github.com/OISF/suricata/pull/16440

PA Updated by Philippe Antoine 22 days ago Actions
Copy link
#5

https://github.com/OISF/suricata/pull/16469

SB Updated by Shivani Bhardwaj 20 days ago Actions
Copy link
#6

Subject changed from http2: progress advancing too quickly on END_STREAM without END_HEADERS to http2: evasion via early progress on END_STREAM without END_HEADERS

PA Updated by Philippe Antoine 18 days ago Actions
Copy link
#7

Status changed from In Review to Resolved

https://github.com/OISF/suricata/pull/16469

PA Updated by Philippe Antoine 15 days ago Actions
Copy link
#8

Status changed from Resolved to Closed

Actions

Also available in: PDF Atom