Snort

Snort

18 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2007-1398

  • EPSS 5.89%
  • Published 10.03.2007 22:19:00
  • Last modified 09.04.2025 00:30:58

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip_conntrack module loaded, allows remote attackers to cause a denial of service (segmentation fault and application crash) via cert...

10

CVE-2006-5276

  • EPSS 87.7%
  • Published 20.02.2007 01:28:00
  • Last modified 09.04.2025 00:30:58

Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.

7.8

CVE-2007-0251

  • EPSS 2.83%
  • Published 16.01.2007 23:28:00
  • Last modified 09.04.2025 00:30:58

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive informa...

5

CVE-2006-6931

  • EPSS 3.65%
  • Published 16.01.2007 23:28:00
  • Last modified 09.04.2025 00:30:58

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a...

10

CVE-2003-0033

  • EPSS 51.59%
  • Published 07.03.2003 05:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets.

5

CVE-2001-1558

  • EPSS 0.41%
  • Published 31.12.2001 05:00:00
  • Last modified 03.04.2025 01:03:51

Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash).

7.5

CVE-2001-0669

  • EPSS 14.76%
  • Published 30.10.2001 05:00:00
  • Last modified 03.04.2025 01:03:51

Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x b...

5

CVE-2000-1226

  • EPSS 0.57%
  • Published 31.12.2000 05:00:00
  • Last modified 03.04.2025 01:03:51

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as...