Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2009-3641

45
FAUCET Score

CVE-2009-3641 describes a denial-of-service vulnerability in Snort versions prior to 2.8.5.1 when the verbose (-v) option is enabled. This flaw allows remote attackers to crash the application by sending specially crafted IPv6 packets utilizing either the TCP or ICMP protocols. The vulnerability has a CVSS score of 4.3, indicating a medium severity, and requires moderate attack complexity with no authentication needed, leading to a partial availability impact. While not listed on the KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.8.3.5CPE matchmatch criteria
cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*
1.6CPE matchmatch criteria
cpe:2.3:a:snort:snort:1.6:*:*:*:*:*:*:*
1.8.0CPE matchmatch criteria
cpe:2.3:a:snort:snort:1.8.0:*:*:*:*:*:*:*
1.8.1CPE matchmatch criteria
cpe:2.3:a:snort:snort:1.8.1:*:*:*:*:*:*:*
1.8.2CPE matchmatch criteria
cpe:2.3:a:snort:snort:1.8.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.3MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
38.78%
Probability of exploitation in next 30 days
EPSS Percentile
98.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
ExploitDB: EDB-9969 · Oct 23, 2009
This CVE's current EPSS score of 0.3878 is in the 99th percentile among its peer group of 19,955 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2009-3641Moderate

Snort: DoS (crash) while printing specially-crafted IPv6 packet using the -v option

Oct 22, 2009

References

dl.snort.org / snort-current/release_notes_2851.txt
Vendor Advisory
marc.info
bugzilla.redhat.com / show_bug.cgi
Exploit
seclists.org / fulldisclosure/2009/Oct/299
ExploitPatch
secunia.com / advisories/37135
Vendor Advisory
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/53912
vrt-sourcefire.blogspot.com / 2009/10/snort-2851-release.html
Patch
openwall.com / lists/oss-security/2009/10/25/5
osvdb.org / 59159
securityfocus.com / bid/36795
ExploitPatch
vupen.com / english/advisories/2009/3014
Vendor Advisory