Bug 232109 - (CVE-2007-1398) CVE-2007-1398: snort DoS
CVE-2007-1398: snort DoS
Status: CLOSED WONTFIX
Product: Fedora
Classification: Fedora
Component: snort (Show other bugs)
6
All Linux
medium Severity medium
: ---
: ---
Assigned To: Dennis Gilmore
Fedora Extras Quality Assurance
: Security
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2007-03-13 17:34 EDT by Ville Skyttä
Modified: 2007-11-30 17:11 EST (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2007-03-13 20:40:05 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Ville Skyttä 2007-03-13 17:34:07 EDT
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1398

"The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when
configured for inline use on Linux without the ip_conntrack module loaded,
allows remote attackers to cause a denial of service (segmentation fault and
application crash) via certain UDP packets produced by send_morefrag_packet and
send_overlap_packet."

FC-5 and 6 are at 2.6.1.1 at the moment.
Comment 1 Dennis Gilmore 2007-03-13 20:40:05 EDT
Thanks for the report.  we don't build inline mode as it fails to build.

Note You need to log in before you can comment on or make changes to this bug.