Description
Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.
References
- http://labs.calyptix.com/advisories/CX-2007-01.txt
- ADV-2007-0152 vdb-entry
- 32095 vdb-entry
- http://www.snort.org/got_source/source.html
- 1017507 vdb-entry
- 33464 vdb-entry
- 20070111 Calyptix Security Advisory CX-2007-001 - Snort 2.6.1.2 Integer Underflow Vulnerability mailing-list
- 22004 vdb-entry
- 2165 third-party-advisory