In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found; instead, it stops only upon reaching inspection-recursion-limit (3000 by default).
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-10-23T08:00:00

Updated: 2024-08-05T19:57:25.695Z

Reserved: 2017-10-16T00:00:00

Link: CVE-2017-15377

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2017-10-23T08:29:00.430

Modified: 2024-11-21T03:14:35.163

Link: CVE-2017-15377

cve-icon Redhat

No data.