Project

General

Profile

Actions
Copy link

Bug #3853

closed

Multi-byte Heap buffer over-read in ssl parser

Added by Philippe Antoine over 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
6.0.0
Affected Versions:
6.0.0beta1, 6.0.0rc1
Effort:
Difficulty:
Label:
Needs backport, Needs backport to 4.1, Needs backport to 5.0

Description

Found by oss-fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24534

Problem is reuse of session_id_length in different contexts : SSLv2 and TLSv1.3

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #3941: Multi-byte Heap buffer over-read in ssl parserClosedShivani BhardwajActions
Copied to Suricata - Bug #3942: Multi-byte Heap buffer over-read in ssl parserClosedJeff LucovskyActions
Actions
Copy link
 #1

Updated by Philippe Antoine over 4 years ago

  • Status changed from Assigned to In Review

Gitlab MR

Actions
Copy link
 #2

Updated by Philippe Antoine about 4 years ago

  • Target version set to 6.0.0rc1
Actions
Copy link
 #3

Updated by Victor Julien about 4 years ago

  • Target version changed from 6.0.0rc1 to 6.0.0
  • Affected Versions 6.0.0rc1 added
Actions
Copy link
 #4

Updated by Jeff Lucovsky about 4 years ago

  • Copied to Bug #3941: Multi-byte Heap buffer over-read in ssl parser added
Actions
Copy link
 #5

Updated by Jeff Lucovsky about 4 years ago

  • Copied to Bug #3942: Multi-byte Heap buffer over-read in ssl parser added
Actions
Copy link
 #6

Updated by Victor Julien about 4 years ago

  • Status changed from In Review to Closed
Actions
Copy link
 #7

Updated by Victor Julien almost 4 years ago

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF