EUVD-2017-15711

Malware in sbrugna...

EUVD-2017-15712

Malware in sbrugna...

Cisco Sourcefire Snort Denial of Service Vulnerability

Cisco Sourcefire Snort is a set of network intrusion prevention software and network intrusion detection software from the U.S. company Cisco Cisco the original Snort team. The software provides packet sniffing, packet analysis and packet detection and other functions. A security vulnerability...

CVE-2017-6657

Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol numbers do not overlap, Snort++ stores all protocol decoders in a single array. That makes it possible to craft packets that have IP protocol numbers in the ether type field which...

CVE-2017-6657

Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol numbers do not overlap, Snort++ stores all protocol decoders in a single array. That makes it possible to craft packets that have IP protocol numbers in the ether type field which...

PT-2017-17223

Name of the Vulnerable Software and Affected Versions Cisco Sourcefire Snort version 3.0 before build 233 Description The issue is related to a Buffer Overread due to the use of a decoder array. The array size was off by one, making it possible to read past the end of the array with an ether type...

CVE-2017-6658: Out-of-bounds Read

Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF. Increasing the array size solves this problem...

CVE-2017-6657: Undefined Security Weakness

Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol numbers do not overlap, Snort++ stores all protocol decoders in a single array. That makes it possible to craft packets that have IP protocol numbers in the ether type field which...

PT-2017-17222

Name of the Vulnerable Software and Affected Versions Cisco Sourcefire Snort version 3.0 before build 233 Description The issue arises from the mishandling of Ether Type Validation, allowing crafted packets to confuse the Snort++ decoder. This occurs because valid ether type and IP protocol numbe...