CVE-2007-0251
First published: Tue Jan 16 2007(Updated: )
Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Snort | =2.6.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://labs.calyptix.com/advisories/CX-2007-01.txt
- http://osvdb.org/32095
- http://osvdb.org/33464
- http://securityreason.com/securityalert/2165
- http://securitytracker.com/id?1017507
- http://www.securityfocus.com/archive/1/456598/100/0/threaded
- http://www.securityfocus.com/bid/22004
- http://www.snort.org/got_source/source.html
- http://www.vupen.com/english/advisories/2007/0152
Frequently Asked Questions
What is the severity of CVE-2007-0251?
CVE-2007-0251 is considered to be of medium severity due to potential exploitation leading to exposure of sensitive information.
How do I fix CVE-2007-0251?
To fix CVE-2007-0251, you should upgrade Snort to a patched version that addresses the integer underflow vulnerability.
What systems are affected by CVE-2007-0251?
CVE-2007-0251 specifically affects Snort version 2.6.1.2.
What are the potential impacts of CVE-2007-0251?
Exploitation of CVE-2007-0251 can lead to corruption of log files and potential leakage of sensitive information.
Who can exploit CVE-2007-0251?
Remote attackers can exploit CVE-2007-0251 by sending crafted GRE packets to a vulnerable Snort installation.
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/snort
- canonical/snort
- version/snort/2.6.1.2