CVE-2007-0251

Description

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-0253

http://www.vupen.com/english/advisories/2007/0152

http://www.snort.org/got_source/source.html

http://www.securityfocus.com/bid/22004

http://www.securityfocus.com/archive/1/456598/100/0/threaded

http://securitytracker.com/id?1017507

http://securityreason.com/securityalert/2165

http://osvdb.org/33464

http://osvdb.org/32095

http://labs.calyptix.com/advisories/CX-2007-01.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS