NVD

Id
85976  
Name
CVE-2017-6658  
Description
Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF. Increasing the array size solves this problem.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2017-05-16  
Modified Date
2017-07-07  
Seq
2017-6658  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
418987 85976 CVE-2017-6448 97313  View
418988 85976 CVE-2017-6448 https://github.com/radare/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257  View
418989 85976 CVE-2017-6448 https://github.com/radare/radare2/issues/6885  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67826 JVNDB-2017-004115 Cisco Sourcefire Snort におけるバッファエラーの脆弱性 Cisco Sourcefire Snort には、バッファエラーの脆弱性が存在します。 CVE-2017-6658 0 CVE-2017-6658 85976 5 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004115.html 2017-05-15 2017-06-16 View