CVE-2009-3641
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of...
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
Exploit likelihood
What each source reports
NVD Score used
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
- Record
CVE-2009-3641- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
- Record
CVE-2009-3641- Updated
- 2026-11-02
EUVDEUVD-2009-3616 No score
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
- Record
EUVD-2009-3616- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-56x5-r874-457f No score
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of...
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
- Record
GHSA-56x5-r874-457f- Updated
- 2026-11-02
OSV No score
Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
- Record
CVE-2009-3641- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Snort 2.8.5 - Multiple Denial of Service Vulnerabilities | 2009-10-22 |
| Exploit-DB | Snort 2.8.5 - IPv6 Denial of Service | 2009-10-23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3641 is a medium vulnerability (CVSS 4.3) in Snort, published October 28, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 38.8%, the 98th percentile. No source names a fixed version.
References
osvdb.org/59159
securityfocus.com/bid/36795
securitytracker.com/id?1023076
dl.snort.org/snort-current/release_notes_2851.txt
secunia.com/advisories/37135
marc.info?l=oss-security&m=125649553414700&w=2
Show 9 moreShow less
vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html
vupen.com/english/advisories/2009/3014
exchange.xforce.ibmcloud.com/vulnerabilities/53912
openwall.com/lists/oss-security/2009/10/25/5
seclists.org/fulldisclosure/2009/Oct/299
bugzilla.redhat.com/show_bug.cgi?id=530863
nvd.nist.gov/vuln/detail/CVE-2009-3641
github.com/advisories/GHSA-56x5-r874-457f
security-tracker.debian.org/tracker/CVE-2009-3641