SN
Product
Snort
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 5Low 0
Watch
Add Snort to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1417 | 8.8 | Jan 23 | Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is… Affected: 2.9.7.0 |
| CVE-2021-40114 | 7.5 | Oct 27 | Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause… Affected: 2.0.0 before 2.9.18 |
| CVE-2021-1223 | 7.5 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: before 2.9.17 |
| CVE-2020-3299 | 5.8 | Oct 21 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured File Policy for… Affected: before 2.9.13.1 |
| CVE-2023-20246 | 5.3 | Nov 1 | Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on… Affected: 3.0.0 before 3.1.57.0 |
| CVE-2021-1495 | 5.3 | Apr 29 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: before 2.9.17.1 |
| CVE-2021-1236 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured… Affected: before 2.9.14 |
| CVE-2021-1224 | 5.3 | Jan 13 | Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated,… Affected: before 2.9.17 |
| CVE-2009-3641 | – | Oct 28 | Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or… Affected: through 2.8.3.5; 1.6; 1.8.0; 1.8.1; 1.8.2; 1.8.3; +20 more |
| CVE-2008-1804 | – | May 22 | preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass… Affected: through 2.8.0 |
| CVE-2007-1398 | – | Mar 10 | The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip_conntrack module loaded, allows remote attackers to cause… Affected: 2.6.1.1; 2.6.1.2; 2.7_beta1 |
| CVE-2006-5276 | – | Feb 20 | Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute… Affected: through 2.6.1.2; 2.6.1; 2.6.1.1; 2.7_beta1 |
| CVE-2006-6931 | – | Jan 16 | Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service… Affected: through 2.6.2 |
| CVE-2007-0251 | – | Jan 16 | Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets,… Affected: 2.6.1.2 |
| CVE-2003-0033 | – | Mar 7 | Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmented RPC packets Affected: 1.8.0; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.8.5; +3 more |
| CVE-2001-1558 | – | Dec 31 | Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash) Affected: 1.8.0; 1.8.1; 1.8.2 |
| CVE-2001-0669 | – | Oct 30 | Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x,… Affected: 1.8.1 |
| CVE-2000-1226 | – | Dec 31 | Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service… Affected: 1.6 |
Showing 18