CVE-2017-6658

Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array

published May 16, 2017

CVSS
—
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF. Increasing the array size solves this problem.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01060 · 64.1th percentile
Published
2017-05-16T17:00Z
EPSS history
Timeline
  • 16 MAY 17:00Z
    Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array
    cvelistv5