CVE-2009-3641

Severity

43%

Complexity

86%

Confidentiality

48%

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Overview

First reported 15 years ago

2009-10-28 14:30:00

Last updated 7 years ago

2017-08-17 01:31:00

Affected Software

Snort Snort 1.6

1.6

Snort Snort 1.8.0

1.8.0

Snort Snort 1.8.1

1.8.1

Snort Snort 1.8.2

1.8.2

Snort Snort 1.8.3

1.8.3

Snort Snort 1.8.4

1.8.4

Snort Snort 1.8.5

1.8.5

Snort Snort 1.8.6

1.8.6

Snort Snort 1.8.7

1.8.7

Snort Snort 1.9.0

1.9.0

Snort Snort 1.9.1

1.9.1

Snort Snort 2.0 Beta

2.0

Snort Snort 2.0 RC1

2.0

Snort Snort 2.6.1

2.6.1

Snort Snort 2.6.1.1

2.6.1.1

Snort Snort 2.6.1.2

2.6.1.2

Snort Snort 2.6.2

2.6.2

Snort Snort 2.7 Beta1

2.7_beta1

Snort Snort

References

http://dl.snort.org/snort-current/release_notes_2851.txt

Vendor Advisory

[oss-security] 20091025 CVE Request -- Snort - 2.8.5.1

20091022 Snort <= 2.8.5 IPV6 Remote DoS

Exploit, Patch

37135