CVE catalog
CVE-2021-40114
ALPINE-CVE-2021-40114
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.47% · Oct 27, 2026
Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper memory resource management while the Snort detection engine is processing ICMP packets. An attacker could exploit this vulnerability by sending a series of ICMP packets through an affected device. A successful exploit could allow the attacker to exhaust resources on the affected device, causing the device to reload.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Alpine | snort | 3.15 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.16 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.17 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.18 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.19 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.20 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.21 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.22 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.23 | 2.9.18-r0 | fixed |
| Alpine | snort | 3.24 | 2.9.18-r0 | fixed |
| Debian | snort | 11 | 2.9.15.1-5 | vulnerable |
| Debian | snort | 11 | 2.9.15.1-6 | vulnerable |
| Debian | snort | 11 | 2.9.20-0+deb11u1 | fixed |
| Debian | snort | 10 | 2.9.15.1-1 | vulnerable |
| Debian | snort | 10 | 2.9.15.1-2 | vulnerable |
| Debian | snort | 10 | 2.9.15.1-3 | vulnerable |
| Debian | snort | 10 | 2.9.15.1-4 | vulnerable |
| Debian | snort | 10 | 2.9.15.1-5 | vulnerable |
| Debian | snort | 10 | 2.9.15.1-6 | vulnerable |
| Debian | snort | 10 | 2.9.7.0-5 | vulnerable |
| Debian | snort | 10 | 2.9.20-0+deb10u1 | fixed |
| Ubuntu | snort | 14.04 | 2.9.2.2-3 | vulnerable |
| Ubuntu | snort | 14.04 | 2.9.5.3-3 | vulnerable |
| Ubuntu | snort | 14.04 | 2.9.6.0-0ubuntu1 | vulnerable |
| Ubuntu | snort | 16.04 | 2.9.7.0-5 | vulnerable |
| Ubuntu | snort | 18.04 | 2.9.7.0-5 | vulnerable |
| Ubuntu | snort | 18.04 | 2.9.7.0-5build1 | vulnerable |
| Ubuntu | snort | 20.04 | 2.9.7.0-5build1 | vulnerable |
| Ubuntu | snort | 22.04 | 2.9.15.1-5 | vulnerable |
| Ubuntu | snort | 22.04 | 2.9.15.1-6 | vulnerable |
| Ubuntu | snort | 22.04 | 2.9.15.1-6build1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Alpine | snort | apk | 3.15 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.16 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.17 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.18 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.19 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.20 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.21 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.22 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.23 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Alpine | snort | apk | 3.24 | 2.9.18-r0 | Not reported | ALPINE-CVE-2021-40114 | Not reported |
| Debian | snort | deb | 11 | 2.9.20-0+deb11u1 | Not reported | DSA-5354-1 | Not reported |
| Debian | snort | deb | 10 | 2.9.20-0+deb10u1 | Not reported | DLA-3317-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: