Published: 28/10/2009 Updated: 17/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Snort prior to 2.8.5.1, when the -v option is enabled, allows remote malicious users to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

Vulnerable Product	Search on Vulmon	Subscribe to Product
snort snort 1.8.0
snort snort 1.8.1
snort snort 1.8.4
snort snort 1.8.5
snort snort 2.0
snort snort 1.9.0
snort snort 2.8.0
snort snort 2.8.2.2
snort snort 2.8.3
snort snort 1.8.7
snort snort 1.6
snort snort 2.6.1.1
snort snort 2.6.1
snort snort
snort snort 1.8.6
snort snort 2.6.2
snort snort 2.6.1.2
snort snort 2.8.3.4
snort snort 2.8.3.4.1
snort snort 1.8.2
snort snort 1.8.3
snort snort 1.9.1
snort snort 2.7_beta1
snort snort 2.8.3.1
snort snort 2.8.3.2

Debian Bug report logs - #553584 CVE-2009-3641: DoS while printing specially-crafted IPv6 packet using the -v option Package: snort; Maintainer for snort is Javier Fernández-Sanguino Peña <jfs@debianorg>; Source for snort is src:snort (PTS, buildd, popcon) Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: ...

============================================= - Date: October 22th, 2009 - Discovered by: Laurent Gaffi&#65533; - Severity: Low ============================================= I VULNERABILITY ------------------------- Snort <= 285 IPV6 Remote DoS II DESCRIPTION ------------------------- A remote DoS was present in Snort 285 when parsi ...

source: wwwsecurityfocuscom/bid/36795/info Snort is prone to multiple denial-of-service vulnerabilities because the application fails to properly process specially crafted IPv6 packets Attackers can exploit these issues to crash the affected application, causing denial-of-service conditions These issues affect Snort 285; other versi ...

NVD-CWE-Other http://secunia.com/advisories/37135 http://dl.snort.org/snort-current/release_notes_2851.txt http://securitytracker.com/id?1023076 https://bugzilla.redhat.com/show_bug.cgi?id=530863 http://www.vupen.com/english/advisories/2009/3014 http://www.securityfocus.com/bid/36795 http://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html http://www.openwall.com/lists/oss-security/2009/10/25/5 http://marc.info/?l=oss-security&m=125649553414700&w=2 http://seclists.org/fulldisclosure/2009/Oct/299 http://www.osvdb.org/59159 https://exchange.xforce.ibmcloud.com/vulnerabilities/53912 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=553584 https://nvd.nist.gov https://www.exploit-db.com/exploits/9969/

CVE-2009-3641

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect