CVE-2009-3641: Snort

Medium severity, CVSS 4.3. EPSS: 38.8% chance of exploitation in the next 30 days.

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

Affected products

• Snort Snort: up to and including 2.8.3.5; version 1.6 only; version 1.8.0 only; version 1.8.1 only; version 1.8.2 only; version 1.8.3 only; …

Published 2009-10-28. Last modified 2026-06-16.