Re: Is Snort affected ? (CVE-2019-1696, CVE-2019-1704)

[Vladimir Kunschikov via Snort-devel <snort-devel () lists snort org>]

Thanks for the notification. Seems like blog post about 2.9.13  was updated
and contain message about this vulnerabilities been fixed.
Do anybody have some pcap file for the reproduction? Or maybe somewhere
does exist some list of Snort versions affected by this vulnerability?

  https://blog.snort.org/2019/04/snort-29130-has-been-released.html



вт, 21 мая 2019 г. в 00:19, Joel Esler (jesler) via Snort-devel <
snort-devel () lists snort org>:

> Thanks,
>
>
>
> I am in touch with the product team now to clarify and if action is
> needed, to take action.
>
>
>
> --
>
> Joel Esler
>
> Manager, Communities Division
>
> Cisco Talos Intelligence Group
>
> http://www.talosintelligence.com
>
>
>
> *From: *Snort-devel <snort-devel-bounces () lists snort org> on behalf of
> Snort User via Snort-devel <snort-devel () lists snort org>
> *Reply-To: *Snort User <snort.user () gmail com>
> *Date: *Monday, May 20, 2019 at 10:40 AM
> *To: *snort-devel <snort-devel () lists snort org>
> *Subject: *[Snort-devel] Is Snort affected ? (CVE-2019-1696,
> CVE-2019-1704)
>
>
>
> Hi
>
>
>
>
> https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-frpwr-smb-snort
>
>
>
> In the above report, I saw -
>
>
>
> "These vulnerabilities may also affect the open-source Snort project. For
> more information, see the Snort website <https://www.snort.org/>."
>
> However, I did not see any information on the website (or I missed it)
>
>
>
> I could not find any relevant info in the ChangeLog of the most recent
> release.
>
>
>
> Can anyone provide any details or info on this?
>
>
>
> - Is Snort affected? How?
>
> - Which versions? Is a patch available? etc
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists snort org
> https://lists.snort.org/mailman/listinfo/snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!
_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!