CVE Vulnerability

CVE-2007-0251

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.

7.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

Scope

References
Link Resource
http://labs.calyptix.com/advisories/CX-2007-01.txt
http://www.snort.org/got_source/source.html
http://www.securityfocus.com/bid/22004
http://securitytracker.com/id?1017507
http://securityreason.com/securityalert/2165
http://osvdb.org/32095
http://osvdb.org/33464
http://www.vupen.com/english/advisories/2007/0152
http://www.securityfocus.com/archive/1/456598/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:snort:snort:2.6.1.2:*:*:*:*:*:*:*
Information

Published : 2007-01-16 11:28

Updated : 2018-10-16 04:32

NVD link : CVE-2007-0251

Mitre link : CVE-2007-0251

Products Affected
No products.
CWE
NVD-CWE-Other