Known vulnerabilities in Snort

Vendor: Sourcefire
Software: Snort
Software CPE: cpe:2.3:a:sourcefire:snort:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Snort Snort is affected by 12 known vulnerabilities: 2 high, 9 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121070 - Out-of-bounds read
CVE-2026-20027
CWE-125 Medium
No
No
3.9.6.0 07.01.2026 SB2026010776
SB2026010777
SB2026010778
#VU121069 - Use After Free
CVE-2026-20026
CWE-416 Medium
No
No
3.9.6.0 07.01.2026 SB2026010776
SB2026010777
SB2026010778
#VU117302 - Buffer Access with Incorrect Length Value
CVE-2025-20360
CWE-805 Medium
No
No
3.9.1.0 15.10.2025 SB20251015158
SB20251015159
SB20251015160
and 2 more
#VU117301 - Buffer Under-read
CVE-2025-20359
CWE-127 Medium
No
No
3.9.3.0 15.10.2025 SB20251015157
SB20251015159
SB20251015160
and 2 more
#VU69244 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CVE-2022-20922
CWE-244 Medium
No
No
3.1.31.0 11.11.2022 SB2022111121
#VU59963 - Integer overflow
CVE-2022-20685
CWE-190 Medium
No
No
2.9.19, 3.1.11.0 24.01.2022 SB2022012417
SB2022012418
SB2022012419
and 1 more
#VU57800 - Improper Handling of Unexpected Data Type
CVE-2021-40116
CWE-241 High
No
No
3.1.0.100 29.10.2021 SB2021102918
#VU57799 - Missing release of memory after effective lifetime
CVE-2021-40114
CWE-401 Medium
No
No
2.9.18 29.10.2021 SB2021102917
#VU55978 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34749
CWE-200 Medium
No
No
2.9.18 19.08.2021 SB2021081903
#VU52752 - Security Features
CVE-2021-1495
CWE-254 Medium
No
No
2.9.17.1 29.04.2021 SB2021042922
#VU51250 - Allocation of Resources Without Limits or Throttling
CVE-2021-1285
CWE-770 Low
No
No
2.9.17 08.03.2021 SB2021030803
#VU738 - Uncontrolled Search Path Element
CVE-2016-1417
CWE-427 High
No
No
- 04.10.2016 SB2016100401
SB2024071243