You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Juliana Fajardini 8b5fb9b044 pgsql: bound Copy responses to their length field ... CopyIn and CopyOut message parsers read the length field, but did not use that information to parse the rest of the message, instead, parsing as many columns as indicated in the columns field, without ever checking against the informed length. This opened the door for attackers to fabricate messages that were never sent by the server, as well as to obfuscate following valid backend messages, in case the columns value was bigger than the actual message (up to ~128KiB). Those parsers also had a message length parsing check off-by-one, fixed in this patch. When a malformed CopyIn or CopyOut response is seen, it is logged as previously, with a new field added to indicate whether it is malformed or not. Ticket: #8863		2 months ago
..
Makefile.am	doc/userguide: generate eve documentation	2 years ago
classification.config	classification: sync and update	6 years ago
reference.config	config: Update reference keys	2 years ago
schema.json	pgsql: bound Copy responses to their length field	2 months ago
suricata.logrotate.in	logrotate: reindent to 4 spaces	6 years ago
suricata.service.in	Sample systemd unit file for Suricata.	9 years ago