CVEvulnerability
CVE-2007-0251
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-01-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Description
Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.
Affected configurations
• snort snort 2.6.1.2
References
- http://labs.calyptix.com/advisories/CX-2007-01.txt labs.calyptix.com
- http://osvdb.org/32095 osvdb.org
- http://osvdb.org/33464 osvdb.org
- http://securityreason.com/securityalert/2165 securityreason.com
- http://securitytracker.com/id?1017507 securitytracker.com
- http://www.securityfocus.com/archive/1/456598/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22004 www.securityfocus.com
- http://www.snort.org/got_source/source.html www.snort.org
- http://www.vupen.com/english/advisories/2007/0152 www.vupen.com
- http://labs.calyptix.com/advisories/CX-2007-01.txt labs.calyptix.com
- http://osvdb.org/32095 osvdb.org
- http://osvdb.org/33464 osvdb.org
- http://securityreason.com/securityalert/2165 securityreason.com
- http://securitytracker.com/id?1017507 securitytracker.com
- http://www.securityfocus.com/archive/1/456598/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22004 www.securityfocus.com
- http://www.snort.org/got_source/source.html www.snort.org
- http://www.vupen.com/english/advisories/2007/0152 www.vupen.com