CVE-2009-3641

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

38.78% chance of exploitation in the next 30 days, 98th percentile

Published

2009-10-28

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://seclists.org/fulldisclosure/2009/Oct/299

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/33306
• https://www.exploit-db.com/exploits/9969

References

• CVE Record
• NVD entry

Related

• CVE-2009-3625
• CVE-2009-3642
• CVE-2009-3622
• CVE-2009-3643
• CVE-2009-3621
• CVE-2009-3644