Description of problem:

Sourcefire has learned of a remotely exploitable vulnerability in the Snort DCE/RPC preprocessor. This preprocessor is vulnerable to a stack-based buffer overflow that could potentially allow attackers to execute code with the same privileges as the Snort binary. Sourcefire has prepared updates for Snort open-source software to address this issue.

Version-Release number of selected component (if applicable): Snort Versions Affected:

Snort 2.6.1, 2.6.1.1, and 2.6.1.2 Snort 2.7.0 beta 1

How reproducible:

Steps to Reproduce: 1. 2. 3. Actual results:

Expected results:

Additional info:

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service (segmentation fault and application crash) via certain UDP packets produced by sendmorefragpacket and sendoverlappacket.