CVE-2009-3641
Snort < 2.8.5.1 - Denial of Service via Crafted IPv6 Packet
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3641. PoCs published by laurent gaffie.
AI-analyzed exploit summary The exploit demonstrates a remote DoS vulnerability in Snort <= 2.8.5 when parsing specially crafted IPv6 packets. It includes two Python scripts using Scapy to trigger crashes via malformed TCP or ICMPv6 packets.
Description
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
Exploits (2)
The exploit demonstrates a remote DoS vulnerability in Snort <= 2.8.5 when parsing specially crafted IPv6 packets. It includes two Python scripts using Scapy to trigger crashes via malformed TCP or ICMPv6 packets.
The exploit demonstrates two denial-of-service vulnerabilities in Snort 2.8.5 by sending malformed IPv6 packets using Scapy. The first PoC targets x86 systems with a crafted TCP payload, while the second affects both x86 and x64 systems via an ICMPv6 packet with an oversized payload.