From b851671dfd11d57e55af152230c1e85dee2a4e67 Mon Sep 17 00:00:00 2001
From: unknown <bxbwj318@gmail.com>
Date: Sat, 6 Jan 2024 19:47:17 +0800
Subject: [PATCH] SSTS

---
 .../OpenHarmony-SA-2023-0329.json             | 150 ++++++++++++++++++
 .../OpenHarmony-SA-2023-0329.yara             |  34 ++++
 2 files changed, 184 insertions(+)
 create mode 100644 zh/security-vulntest/testcases/2023/03/OpenHarmony-SA-2023-0329/OpenHarmony-SA-2023-0329.json
 create mode 100644 zh/security-vulntest/testcases/2023/03/OpenHarmony-SA-2023-0329/OpenHarmony-SA-2023-0329.yara

diff --git a/zh/security-vulntest/testcases/2023/03/OpenHarmony-SA-2023-0329/OpenHarmony-SA-2023-0329.json b/zh/security-vulntest/testcases/2023/03/OpenHarmony-SA-2023-0329/OpenHarmony-SA-2023-0329.json
new file mode 100644
index 0000000..01873f1
--- /dev/null
+++ b/zh/security-vulntest/testcases/2023/03/OpenHarmony-SA-2023-0329/OpenHarmony-SA-2023-0329.json
@@ -0,0 +1,150 @@
+{
+    "month": "2023-03",
+    "release_time": "2022-07-21 14:53:08.541376",
+    "vulnerabilities": [
+        {
+            "month": "2023-03",
+
+            "vul_id": {
+                "cve": "CVE-2023-23914",
+                "openharmony-sa": "OpenHarmony-SA-2023-0329"
+            },
+
+            "severity": "medium",
+
+            "vul_description": {
+                "zh": "在 curl<v7.88.0 版本中存在敏感信息的明文传输漏洞",
+                "en": "A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0."
+            },
+
+            "vul_impact": {
+                "zh": "当连续请求多个URL时，该漏洞可能导致HSTS功能失效",
+                "en": " That could cause HSTS functionality fail when multiple URLs are requested serially."
+            },
+
+            "disclosure": {
+                "zh": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-03.md",
+                "en": "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md"
+            },
+
+            "patch_info": {
+                "3.1.x": {
+                    "patch_url": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/110"
+                    ],
+                    "patch_file": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/110.patch"
+                    ],
+                    "diff_file": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/110.diff"
+                    ]
+                },
+                "3.0.x": {
+                    "patch_url": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/111"
+                    ],
+                    "patch_file": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/111.patch"
+                    ],
+                    "diff_file": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/111.diff"
+                    ]
+                },
+                "1.1.x": {
+                    "patch_url": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/112"
+                    ],
+                    "patch_file": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/112.patch"
+                    ],
+                    "diff_file": [
+                        "https://gitee.com/openharmony/third_party_curl/pulls/112.diff"
+                    ]
+                }
+            },
+
+            "affected_projects": "third_party_curl",
+
+            "affected_versions": [
+                "3.1-Release - 3.1.6-Release, 3.0-LTS - 3.0.8-LTS, 1.0.1-release - 1.1.5-LTS"
+            ],
+
+            "affected_device": {
+                "mini": {
+                    "liteos": {
+                        "rics-v": {
+                            "scan_strategy": {
+                                "ssts": {
+                                    "enable": false
+                                },
+                                "ists": {
+                                    "enable": false
+                                }
+                            }
+                        }
+                    }
+                },
+
+                "small": {
+                    "liteos": {
+                        "rics-v": {
+                            "scan_strategy": {
+                                "ssts": {
+                                    "enable": false
+                                },
+                                "ists": {
+                                    "enable": false
+                                }
+                            }
+                        }
+                    },
+                    "linux": {
+                        "arm": {
+                            "scan_strategy": {
+                                "ssts": {
+                                    "enable": false
+                                },
+                                "ists": {
+                                    "enable": false
+                                }
+                            }
+                        }
+                    }
+                },
+
+                "standard": {
+                    "linux": {
+                        "arm": {
+                            "scan_strategy": {
+                                "ssts": {
+                                    "enable": false
+                                },
+                                "ists": {
+                                    "enable": true,
+                                    "yara": {
+                                        "affected_files": [
+                                            "/system/lib/libhttp.z.so"
+                                        ],
+                                        "yara_rules": [
+                                            "OpenHarmony-SA-2023-0329.yara"
+                                        ]
+                                    }
+                                }
+                            }
+                        },
+                        "arm64": {
+                            "scan_strategy": {
+                                "ssts": {
+                                    "enable": false
+                                },
+                                "ists": {
+                                    "enable": false
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    ]
+}
\ No newline at end of file
diff --git a/zh/security-vulntest/testcases/2023/03/OpenHarmony-SA-2023-0329/OpenHarmony-SA-2023-0329.yara b/zh/security-vulntest/testcases/2023/03/OpenHarmony-SA-2023-0329/OpenHarmony-SA-2023-0329.yara
new file mode 100644
index 0000000..2675142
--- /dev/null
+++ b/zh/security-vulntest/testcases/2023/03/OpenHarmony-SA-2023-0329/OpenHarmony-SA-2023-0329.yara
@@ -0,0 +1,34 @@
+/* 
+ * Copyright (c) 2023 Huawei Device Co., Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import "console"
+import "elf"
+
+rule OpenHarmony_SA_2023_0329
+{
+ meta:
+   date="2023-03"
+   openharmony_sa="OpenHarmony-SA-2023-0329"
+   affected_files="libhttp.z.so"
+   path ="rk3568/lib.unstripped/communication/netstack/libhttp.z.so"
+  
+ strings:
+
+   $fix = "Reject response due to more than %u content encodings"
+  
+ condition: 
+   $fix and console.log("OpenHarmony-SA-2023-0329 testcase pass") 
+ }
+ 
\ No newline at end of file
-- 
Gitee