CVE-2009-3641

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol.

• https://dl.snort.org/snort-current/release_notes_2851.txtVendor Advisory
• https://marc.info/?l=oss-security&m=125649553414700&w=2
• https://seclists.org/fulldisclosure/2009/Oct/299Exploit, Patch
• https://secunia.com/advisories/37135Vendor Advisory
• https://securitytracker.com/id?1023076
• https://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.htmlPatch
• https://www.openwall.com/lists/oss-security/2009/10/25/5
• https://www.osvdb.org/59159
• https://www.securityfocus.com/bid/36795Exploit, Patch
• https://www.vupen.com/english/advisories/2009/3014Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=530863Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53912
• https://dl.snort.org/snort-current/release_notes_2851.txtVendor Advisory
• https://marc.info/?l=oss-security&m=125649553414700&w=2
• https://seclists.org/fulldisclosure/2009/Oct/299Exploit, Patch
• https://secunia.com/advisories/37135Vendor Advisory
• https://securitytracker.com/id?1023076
• https://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.htmlPatch
• https://www.openwall.com/lists/oss-security/2009/10/25/5
• https://www.osvdb.org/59159
• https://www.securityfocus.com/bid/36795Exploit, Patch
• https://www.vupen.com/english/advisories/2009/3014Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=530863Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53912

Published

Oct 28, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3635The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4…
• CVE-2009-3636Cross-site scripting (XSS) vulnerability in the Install Tool…
• CVE-2009-3637Stack-based buffer overflow in the M_AddToServerList functio…
• CVE-2009-3638Integer overflow in the kvm_dev_ioctl_get_supported_cpuid fu…
• CVE-2009-3639The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 befor…
• CVE-2009-3640The update_cr8_intercept function in arch/x86/kvm/x86.c in t…
• CVE-2009-3642Multiple SQL injection vulnerabilities in the Call Logging f…
• CVE-2009-3643Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote atta…
• CVE-2009-3644SQL injection vulnerability in the Soundset (com_soundset) c…
• CVE-2009-3645SQL injection vulnerability in the JoomlaCache CB Resume Bui…
• CVE-2009-3646InterVations NaviCOPA Web Server 3.01 allows remote attacker…
• CVE-2009-3647Cross-site scripting (XSS) vulnerability in emaullinks.php i…