Vulnerability in Snort

CVE-2000-1226

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan.

EPSS: 0.013 (66.6th percentile) — read the EPSS interpretation.

Affected products

  • Snort — versions 1.6
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)