Vulnerability in Snort

CVE-2009-3641

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

EPSS: 0.388 (98.4th percentile) — read the EPSS interpretation.

Affected products

  • Snort — versions 1.6, 1.8.0, 1.8.1
  • N/a — versions n/a

References