Rule History

SID: 2016322 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 3 • Jan 31, 2013, 12:00 PM

Message:

ET DOS LibuPnP CVE-2012-5958 ST DeviceType Buffer Overflow

Rule:

alert udp $EXTERNAL_NET any -> $HOME_NET 1900 (msg:"ET DOS LibuPnP CVE-2012-5958 ST DeviceType Buffer Overflow"; content:"|0D 0A|ST|3a|"; nocase; pcre:"/^[^\r\n]*schemas\x3adevice\x3a[^\r\n\x3a]{181}/Ri"; content:"schemas|3a|device"; nocase; fast_pattern; reference:cve,CVE_2012-5958; reference:cve,CVE-2012-5962; classtype:attempted-dos; sid:2016322; rev:3; metadata:created_at 2013_01_31, confidence High, signature_severity Major, updated_at 2022_07_01;)

Created:

Jan 31, 2013, 12:00 PM

Updated:

Jul 1, 2022, 12:00 PM

DB Created:

Sep 21, 2024, 3:00 AM

DB Updated:

May 30, 2025, 12:04 AM

Filename:

rules/emerging-dos.rules