Unscored severity · published Jan 16, 2007
CVE-2007-0251
Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets,…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SN
Snort · Snort
2.6.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0251
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0251
labs.calyptix.com
http://labs.calyptix.com/advisories/CX-2007-01.txt
osvdb.org
http://osvdb.org/32095
osvdb.org
http://osvdb.org/33464
securityreason.com
http://securityreason.com/securityalert/2165
securitytracker.com
http://securitytracker.com/id?1017507
www.securityfocus.com
http://www.securityfocus.com/archive/1/456598/100/0/threaded
More from Snort
8.8
CVE-2016-1417
Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is…
7.5
CVE-2021-40114
Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause…
7.5
CVE-2021-1223
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for…
5.8
CVE-2020-3299
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for…
5.3
CVE-2023-20246
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on…