Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Misinterpretation of IPv6 addresses (UTMP) #291

Closed
Zawadidone opened this issue Jun 26, 2023 · 0 comments · Fixed by #292
Closed

Misinterpretation of IPv6 addresses (UTMP) #291

Zawadidone opened this issue Jun 26, 2023 · 0 comments · Fixed by #292

Comments

@Zawadidone
Copy link
Contributor

The parsers WTMP and BTMP assume that the ut_addr is an IPv4 address by only reading the the first four bytes of the value.

This leads to misinterpretation of IPv6 addresses and results in events that contain valid IPv4 addresses because only the first four bytes of an IPv6 address are read.
@Zawadidone Zawadidone mentioned this issue Jun 26, 2023
Merged
@Zawadidone Zawadidone changed the title WTMP/BTMP IPv6 issue Misinterpretation of IPv6 addresses (UTMP) Jun 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fix UTMP misinterpretation of IPv6 addresses Zawadidone/dissect.target
1 participant
@Zawadidone