[SECURITY] [DLA 3317-1] snort security update

2023-02-1023:23:58

lists.debian.org

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.6%

JSON

Debian LTS Advisory DLA-3317-1 [email protected]
https://www.debian.org/lts/security/ Markus Koschany
February 11, 2023 https://wiki.debian.org/LTS

Package : snort
Version : 2.9.20-0+deb10u1
CVE ID : CVE-2020-3299 CVE-2020-3315 CVE-2021-1223 CVE-2021-1224
CVE-2021-1236 CVE-2021-1494 CVE-2021-1495 CVE-2021-34749
CVE-2021-40114
Debian Bug : 1021276

Multiple security vulnerabilities were discovered in snort, a flexible Network
Intrusion Detection System, which could allow an unauthenticated, remote
attacker to cause a denial of service (DoS) condition or bypass filtering
technology on an affected device and ex-filtrate data from a compromised host.

For Debian 10 buster, these problems have been fixed in version
2.9.20-0+deb10u1.

We recommend that you upgrade your snort packages.

For the detailed security status of snort please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/snort

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: This is a digitally signed message part

OSVersionArchitecturePackageVersionFilename
Debian11arm64snort< 2.9.20-0+deb11u1snort_2.9.20-0+deb11u1_arm64.deb
Debian11allsnort-common< 2.9.20-0+deb11u1snort-common_2.9.20-0+deb11u1_all.deb
Debian11amd64snort< 2.9.20-0+deb11u1snort_2.9.20-0+deb11u1_amd64.deb
Debian11mipselsnort-common-libraries< 2.9.20-0+deb11u1snort-common-libraries_2.9.20-0+deb11u1_mipsel.deb
Debian10arm64snort-common-libraries< 2.9.20-0+deb10u1snort-common-libraries_2.9.20-0+deb10u1_arm64.deb
Debian11mipselsnort< 2.9.20-0+deb11u1snort_2.9.20-0+deb11u1_mipsel.deb
Debian11mips64elsnort-common-libraries< 2.9.20-0+deb11u1snort-common-libraries_2.9.20-0+deb11u1_mips64el.deb
Debian10allsnort-doc< 2.9.20-0+deb10u1snort-doc_2.9.20-0+deb10u1_all.deb
Debian11armelsnort< 2.9.20-0+deb11u1snort_2.9.20-0+deb11u1_armel.deb
Debian10armhfsnort-common-libraries< 2.9.20-0+deb10u1snort-common-libraries_2.9.20-0+deb10u1_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	arm64	snort	< 2.9.20-0+deb11u1	snort_2.9.20-0+deb11u1_arm64.deb
Debian	11	all	snort-common	< 2.9.20-0+deb11u1	snort-common_2.9.20-0+deb11u1_all.deb
Debian	11	amd64	snort	< 2.9.20-0+deb11u1	snort_2.9.20-0+deb11u1_amd64.deb
Debian	11	mipsel	snort-common-libraries	< 2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_mipsel.deb
Debian	10	arm64	snort-common-libraries	< 2.9.20-0+deb10u1	snort-common-libraries_2.9.20-0+deb10u1_arm64.deb
Debian	11	mipsel	snort	< 2.9.20-0+deb11u1	snort_2.9.20-0+deb11u1_mipsel.deb
Debian	11	mips64el	snort-common-libraries	< 2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_mips64el.deb
Debian	10	all	snort-doc	< 2.9.20-0+deb10u1	snort-doc_2.9.20-0+deb10u1_all.deb
Debian	11	armel	snort	< 2.9.20-0+deb11u1	snort_2.9.20-0+deb11u1_armel.deb
Debian	10	armhf	snort-common-libraries	< 2.9.20-0+deb10u1	snort-common-libraries_2.9.20-0+deb10u1_armhf.deb