CVE-2017-6658

CVE-2017-6658 is a buffer overread vulnerability affecting Cisco Sourcefire Snort 3.0 before build 233, stemming from an off-by-one error in a decoder array when processing an ether type of 0xFFFF. This flaw allows an unauthenticated attacker to cause a denial of service (DoS) due to the ability to read past the end of the array. With a CVSS v3 score of 7.5 (High), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.