Secunia

Alejandro Hernandez Hernandez has reported a vulnerability in Snort, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a NULL pointer dereference error in the "PrintTcpOptions()" function located in snort-2.4.0/src/log.c. This can be exploited to cause Snort to crash via a TCP/IP packet containing a malformed TCP SACK option.

Successful exploitation requires that Snort is configured to run in verbose mode (using the switch -v).

The vulnerability has been reported in version 2.4.0. Prior versions may also be affected.

Solution
The vulnerability has been fixed in the CVS repositories, and will be included in version 2.4.1.

Provided and/or discovered by
Alejandro Hernandez Hernandez

Original Advisory
Snort.org:
http://www.snort.org/pub-bin/snortnews.cgi#58

Vulnfact Research Group:
http://www.vulnfact.com/advisories/snort_adv.html

Deep Links
Links available in Customer Area