Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-1398
HistoryMar 10, 2007 - 12:00 a.m.

CVE-2007-1398

2007-03-1000:00:00
ubuntu.com
ubuntu.com
11

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS

0.057

Percentile

93.4%

The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when
configured for inline use on Linux without the ip_conntrack module loaded,
allows remote attackers to cause a denial of service (segmentation fault
and application crash) via certain UDP packets produced by
send_morefrag_packet and send_overlap_packet.

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS

0.057

Percentile

93.4%