debian/snort vulnerabilities

Latest debian/snort CVEs

Newest publication first

1. DSA-5354-1 snort - security update

   Published 2023-02-18

   Unknown

2. DLA-3317-1 snort - security update

   Published 2023-02-11

   Unknown

3. CVE-2009-3641 Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

   Published 2009-10-28

   Medium·CVSS 4.3 EPSS 38.8%

   Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

4. DTSA-173-1 snort - rules bypass

   Published 2008-11-03

   Unknown

5. CVE-2008-1804 preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using...

   Published 2008-05-22

   Medium·CVSS 6.8 EPSS 2.3%

   preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment.

6. CVE-2006-6931 Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and de...

   Published 2007-01-16

   Medium·CVSS 5.0 EPSS 2.4%

   Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."

7. CVE-2006-2769 The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.

   Published 2006-06-02

   Medium·CVSS 5.0 EPSS 10.8%

   The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.

8. DSA-297 snort - integer overflow, buffer overflow

   Published 2003-05-01

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.