Snort 3 Detection Engine vulnerabilities

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine related to handling GTP extension headers in the codec. An unauthenticated remote attacker can send a crafted, fragmented UDP datagram, causing an infinite loop and a denial of service condition.

Multiple Cisco products are affected by a vulnerability in the GRE tunnel decapsulation feature of the Snort 3 Detection Engine. An unauthenticated remote attacker can send a crafted GRE payload, causing an unexpected restart of the engine and leading to a bypass or denial of service condition.

A vulnerability in the Snort 3 Detection Engine of multiple Cisco products allows an unauthenticated, remote attacker to cause the engine to restart, interrupting packet inspection. The issue is due to an error in the binder module initialization logic. Exploitation involves sending certain packets through an established connection.