Project

General

Profile

Actions
Copy link

Security #7268

closed

Security #7267: ja4: non alphanumeric characters in alpn lead to panic

ja4: non alphanumeric characters in alpn lead to panic (7.0.x backport)

Added by OISF Ticketbot about 1 month ago. Updated 16 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
7.0.7
Affected Versions:
Label:
CVE:
2024-47522
Git IDs:

34a46251564d7d793c93ae09cffdc2c2712164bb

Severity:
HIGH
Disclosure Date:
Actions
Copy link
 #1

Updated by Victor Julien about 1 month ago

  • Severity changed from MODERATE to HIGH

HIGH as crash, but since ja4 is disabled by default it's not critical.

Actions
Copy link
 #2

Updated by Victor Julien about 1 month ago

  • Status changed from Assigned to Resolved
Actions
Copy link
 #5

Updated by Victor Julien about 1 month ago

  • Status changed from Resolved to Closed
Actions
Copy link
 #6

Updated by Victor Julien 16 days ago

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF