Impact

Specially crafted traffic can cause a limited buffer overflow.

Specially crafted datasets can cause a limited buffer overflow.

Patches

Workarounds

• Do not load untrusted datasets
• Do not use rules with base64_decode keyword with bytes option with value 1, 2 or 5

For 7.0.x :

• Set app-layer.protocols.smtp.mime.body-md5 to false

References

https://redmine.openinfosecfoundation.org/issues/6905 (7.0.x)
https://redmine.openinfosecfoundation.org/issues/6931 (6.0.x)

Credits

Evgeny Legerov of Kaspersky Lab.