CVE-2007-0251

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-16 · updated 2026-06-16

Description

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.

Affected products

Snort: 2.6.1.2

References

http://labs.calyptix.com/advisories/CX-2007-01.txt
http://osvdb.org/32095
http://osvdb.org/33464
http://securityreason.com/securityalert/2165
http://securitytracker.com/id?1017507
http://www.securityfocus.com/archive/1/456598/100/0/threaded
http://www.securityfocus.com/bid/22004
http://www.snort.org/got_source/source.html
http://www.vupen.com/english/advisories/2007/0152
http://labs.calyptix.com/advisories/CX-2007-01.txt
http://osvdb.org/32095
http://osvdb.org/33464

Get alerted when CVE-2007-0251 or the next vulnerability affects your stack