| Package | Affected versions | Patched versions |
|---|---|---|
| snort | = 2.1.0= 2.1.1_rc1= 2.1.3= 2.2 |
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free