CVE-2009-3641

Name	CVE-2009-3641
Source	CVE (at NVD; RH)
Description	Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.
NVD severity	medium
Debian Bugs	553584
Debian/oldstable	not known to be vulnerable
Debian/stable	not known to be vulnerable
Debian/testing	not known to be vulnerable
Debian/unstable	not known to be vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
snort (PTS)	etch	2.3.3-11	vulnerable
	lenny (security)	2.7.0-19+lenny1	vulnerable
	lenny	2.7.0-20.4	vulnerable
	squeeze, sid	2.8.5.2-2	fixed

The next table lists affected binary packages.

Binary Package	Release	Version	Status	Architecures
snort, snort-common-libraries, snort-mysql, snort-pgsql	lenny (security)	2.7.0-19+lenny1	vulnerable	alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
	lenny	2.7.0-20.4	vulnerable	alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
	sid	2.8.5.2-2	fixed	alpha, amd64, armel, hppa, i386, ia64, kfreebsd-amd64, kfreebsd-i386, mips, mipsel, powerpc, s390, sparc
	squeeze	2.8.5.2-2	fixed	amd64, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
snort, snort-mysql, snort-pgsql	etch	2.3.3-11	vulnerable	alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390, sparc
snort-common, snort-doc, snort-rules-default	etch	2.3.3-11	vulnerable	all
	lenny (security)	2.7.0-19+lenny1	vulnerable	all
	lenny	2.7.0-20.4	vulnerable	all
	squeeze	2.8.4.1-4	vulnerable	all
	sid, squeeze	2.8.5.2-2	fixed	all

The information above is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
snort	source	(unstable)	2.8.5.2-1	unimportant		553584

current debian packages are not compiled with support for ipv6