mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
fe939e8da7
parse_row_description and parse_consolidated_data_row read a field_count from the message body and use that to iterate a slice, without checking whether the count actually fits the body. A backend-controlled attack could lead to fewer fields logged, or stalling of the parser to-client direction for the duration of the flow. A malformed_response event is set for pgsql, if either of those message's inner parsers has a field_count that can't be reconciled with the body slice. A new pgsql.response log field is added to indicate this, too: pgsql.response.row_description_malformed, a boolean. This wasn't added to the consolidated data row message, per its summarization nature. The row_description unit test buffer declared a length one byte longer than its three fields occupy. The old code silently discarded that surplus byte; the new one reports it, so the buffer was corrected. Ticket: #8885 |
2 months ago | |
|---|---|---|
| .. | ||
| Makefile.am | 2 years ago | |
| classification.config | 6 years ago | |
| reference.config | 2 years ago | |
| schema.json | 2 months ago | |
| suricata.logrotate.in | ||
| suricata.service.in | ||