[SECURITY] [DSA 5354-1] snort security update

🗓️ 18 Feb 2023 16:38:22Reported by DebianType

debian

debian🔗 lists.debian.org👁 60 Views

Debian Security Advisory for snort update, fixing multiple vulnerabilitie

Reporter	Title	Published	Views	Family All 174
ATTACKERKB	CVE-2021-34749	18 Aug 202116:00	–	attackerkb
ATTACKERKB	CVE-2021-40114	27 Oct 202116:00	–	attackerkb
AlpineLinux	CVE-2021-40114	27 Oct 202118:56	–	alpinelinux
BDU FSTEC	The vulnerabilities of the Snort mechanism on the Cisco IOS operating system, the Cisco Firepower Threat Defense network firewall, and the Cisco Firepower Management Center network management software allow attackers to compromise the integrity of protected information.	19 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort intrusion detection system, which includes Cisco Firepower Threat Defense (FTD) for microprogramming network firewalls, Cisco SD-WAN for programmatically defined networks, Cisco IOS XE for network operating systems, and Cisco Meraki for networking devices, allows attackers to bypass security measures and execute malicious activities.	19 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TCP Fast Open (TFO) protocol extension in the Snort intrusion detection system allows a hacker to bypass the configured file policy for HTTP.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the detection mechanism for applications in the Snort intrusion detection system allows attackers to increase their privileges.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort intrusion detection system, related to errors in processing HTTP headers, allows a perpetrator to bypass the configured file policy for HTTP.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), which includes network devices like Cisco Catalyst, routers such as ISR and ISA, and the virtual router with integrated ISRv services, allows attackers to compromise the integrity of protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), which includes network devices like Cisco Catalyst, routers such as ISR and ISA, and the virtual router with integrated ISRv services, allows attackers to compromise the integrity of protected information.	24 May 202100:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	snort	2.9.20-0+deb11u1	snort_2.9.20-0+deb11u1_any.deb
Debian	11	any	snort-common	2.9.20-0+deb11u1	snort-common_2.9.20-0+deb11u1_any.deb
Debian	11	amd64	snort-common-libraries	2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_amd64.deb
Debian	11	arm64	snort-common-libraries	2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_arm64.deb
Debian	11	armel	snort-common-libraries	2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_armel.deb
Debian	11	armhf	snort-common-libraries	2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_armhf.deb
Debian	11	i386	snort-common-libraries	2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_i386.deb
Debian	11	mips64el	snort-common-libraries	2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_mips64el.deb
Debian	11	mipsel	snort-common-libraries	2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_mipsel.deb
Debian	11	ppc64el	snort-common-libraries	2.9.20-0+deb11u1	snort-common-libraries_2.9.20-0+deb11u1_ppc64el.deb

18 Feb 2023 16:38Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.8

CVSS 3.16.8 - 8.6

CVSS 35.8

EPSS0.02367

SSVC

snort debian cve-2020-3299 cve-2020-3315 cve-2021-1223 cve-2021-1224 cve-2021-1236 cve-2021-1494 cve-2021-1495 cve-2021-34749 cve-2021-40114 denial of service filtering security update