Project

General

Profile

Actions

Bug #13922

closed

Snort - rules package downloads may hang for an extended period if remote site offers an HTTP/2 connection

Added by Bill Meeks about 1 year ago. Updated about 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Snort
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Affected Version:
2.7.0
Affected Plus Version:
23.01
Affected Architecture:
All

Description

Changes in cURL function behavior in PHP 8.1 make the Snort package vulnerable to a hang condition when downloading rules update packages if the remote site offers an HTTP/2 connection. Additionally, some other modernizations are needed in the cURL code used in Snort in light of recent updates.

Actions

Also available in: Atom PDF