Logic Flaw in Cisco Snort 3 Detection Engine Leads to Denial of Service

CVE-2026-76445

What is CVE-2026-76445?

A vulnerability exists in Cisco's Snort 3 Detection Engine due to a logic flaw in handling General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers. This flaw may be exploited by an unauthenticated remote attacker who sends a specially crafted, fragmented UDP datagram containing these headers. Once exploited, the detection engine may enter an infinite loop, resulting in a denial of service (DoS) condition that prevents normal operation.

References