Open Information Security Foundation

06/20/2025

12:17 PM Suricata Bug #7772 (In Review): flowbits: no-op set and isset combinations are accepted

In Review PR: https://github.com/OISF/suricata/pull/13508 Shivani Bhardwaj

10:14 AM Suricata Bug #7783 (In Review): smtp: inspection is triggered at incorrect points

In Review PR: https://github.com/OISF/suricata/pull/13505 Shivani Bhardwaj

10:06 AM Suricata Bug #7783 (In Review): smtp: inspection is triggered at incorrect points

SMTP requests inspection of raw data upon a full side parsed in a transaction. This is incorrect. It should mimic wha... Shivani Bhardwaj

10:04 AM Suricata Documentation #4351 (In Review): doc: explain the engine logic to trigger inspection of TCP data

Shivani Bhardwaj

06/19/2025

08:58 AM Suricata Optimization #7775 (New): applayer: deduplicate parsers smb/dcerpc and dcerpc

There is a lot of code duplication between smb/dcerpc and the standalone dcerpc parsers that can be deduplicated. Shivani Bhardwaj

08:53 AM Suricata Bug #7774 (Assigned): flowbits: unneeded set + toggle combinations are accepted

For example, a rule like:
@alert tcp any any -> any any (msg:"set + toggle"; http.method; content:"GET"; flowbits:... Shivani Bhardwaj

08:51 AM Suricata Bug #7773 (Assigned): flowbits: no-op unset + isnotset combinations are accepted

For example, a rule like:
@alert tcp any any -> any any (msg:"unset + isnotset"; flowbits:isnotset,abc; http.metho... Shivani Bhardwaj

08:50 AM Suricata Bug #7772 (In Review): flowbits: no-op set and isset combinations are accepted

For example, rules like
@alert tcp any any -> any any (msg:"set + isset flowbit"; http.method; content:"GET"; flow... Shivani Bhardwaj

08:48 AM Suricata Bug #7771 (Assigned): flowbits: cyclic dependencies in flowbits are accepted by the engine

For example, rules like
@
alert http any any -> any any (http.user_agent; content:"Mozilla"; flowbits:isset, head... Shivani Bhardwaj

06/17/2025

06:51 AM Suricata Bug #7765 (Closed): dcerpc: uint16 overflow in bindack parsing

Already done in https://github.com/oISF/suricata/commit/d2f00ac824068 Shivani Bhardwaj