Snort TCP/IP Options Denial of Service Vulnerability
- 0
- Add a Comment
Critical: Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
Software: Snort 2.2.x
Description: Marcin Zgorecki has reported a vulnerability in Snort, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to an error in the printing of TCP/IP options. This can be exploited to cause an unspecified DoS by sending a specially crafted packet.
Successful exploitation requires that snort is configured with “FAST” output or verbose mode.
The vulnerability has been reported in version 2.2.10. Other versions may also be affected.
Solution: Update to 2.3.0-RC1 or later.
