CVE Vulnerabilities

CVE-2004-2652

Published: Dec 31, 2004 | Modified: Jul 20, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.

Affected Software

Name Vendor Start Version End Version
Snort Sourcefire 2.1.0 2.1.0
Snort Sourcefire 2.1.1_rc1 2.1.1_rc1
Snort Sourcefire 2.1.3 2.1.3
Snort Sourcefire 2.2 2.2

References