CVE-2009-3641

描述

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

如何修補 CVE-2009-3641

要修補 CVE-2009-3641,請將受影響套件升級到下列已修補版本。

• Debian/snort—升級至 2.8.5.2-1 或更新版本

CVE-2009-3641 正在被利用嗎?

中等 — EPSS 為 38.8%,可持續追蹤但非最高優先。

受影響套件(1)

• Debian/snortfrom 0, < 2.8.5.2-1

參考連結(13)

• ADVISORYdl.snort.org/snort-current/release_notes_2851.txt
• ADVISORYsecunia.com/advisories/37135
• ADVISORYwww.vupen.com/english/advisories/2009/3014
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2009-3641
• EXPLOIT