CVE-2009-3641 - Snort: DoS (crash) while printing specially-crafted IPv6 packet using the -v option

Back Back to CVE browser

MEDIUM

Snort: DoS (crash) while printing specially-crafted IPv6 packet using the -v option

Published Oct 28, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 38.78%

Description

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (16)

http://dl.snort.org/snort-current/release_notes_2851.txt
x_refsource_CONFIRMVendor Advisory
http://marc.info/?l=oss-security&m=125649553414700&w=2
mailing-listx_refsource_MLIST
http://seclists.org/fulldisclosure/2009/Oct/299
mailing-listx_refsource_FULLDISCExploitPatch
http://secunia.com/advisories/37135
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1023076
vdb-entryx_refsource_SECTRACK
http://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html
x_refsource_CONFIRMPatch
http://www.openwall.com/lists/oss-security/2009/10/25/5
mailing-listx_refsource_MLIST
http://www.osvdb.org/59159
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/36795
vdb-entryx_refsource_BIDExploitPatch
http://www.vupen.com/english/advisories/2009/3014
vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2009-3641
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=530863
x_refsource_CONFIRMExploitIssue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3616
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53912
vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2009-3641
https://www.cve.org/CVERecord?id=CVE-2009-3641

Link	Providers	Tags
http://dl.snort.org/snort-current/release_notes_2851.txt		x_refsource_CONFIRMVendor Advisory
http://marc.info/?l=oss-security&m=125649553414700&w=2		mailing-listx_refsource_MLIST
http://seclists.org/fulldisclosure/2009/Oct/299		mailing-listx_refsource_FULLDISCExploitPatch
http://secunia.com/advisories/37135		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1023076		vdb-entryx_refsource_SECTRACK
http://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html		x_refsource_CONFIRMPatch
http://www.openwall.com/lists/oss-security/2009/10/25/5		mailing-listx_refsource_MLIST
http://www.osvdb.org/59159		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/36795		vdb-entryx_refsource_BIDExploitPatch
http://www.vupen.com/english/advisories/2009/3014		vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2009-3641		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=530863		x_refsource_CONFIRMExploitIssue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3616		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/53912		vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2009-3641
https://www.cve.org/CVERecord?id=CVE-2009-3641