CVE-2017-6658

high Cisco
CVSS v3 Base Score
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.5%
Exploitation probability in 30 days
Top 35% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
None
Integrity
None
Availability
High
Published: May 16, 2017 (3284 days ago)
Last Modified: May 13, 2026
Vendor: Cisco
Source: NVD

Description

Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF. Increasing the array size solves this problem.

CWE

CWE-125

Affected Products

cisco sourcefire snort

References

🔗 blog.snort.org 🔗 www.securitytracker.com 🔗 tools.cisco.com 🔗 blog.snort.org 🔗 www.securitytracker.com