Impact
A specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer underflow.
Patches
The issue has been addressed in Suricata 7.0.8.
References
https://redmine.openinfosecfoundation.org/issues/7393
Credits
Reported by Simen Lybekk
Impact
A specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer underflow.
Patches
The issue has been addressed in Suricata 7.0.8.
References
https://redmine.openinfosecfoundation.org/issues/7393
Credits
Reported by Simen Lybekk