Remote Denial of Service Vulnerability in Cisco Firepower System Software

CVE-2018-0281

What is CVE-2018-0281?

A vulnerability within the detection engine of Cisco Firepower System Software permits an unauthenticated, remote attacker to trigger a restart of the Snort detection engine on affected devices. This interruption arises from improper handling of a Transport Layer Security (TLS) extension during the establishment of TLS connections. By sending a specially crafted TLS connection request, an attacker can exploit this vulnerability, leading to a temporary denial of service (DoS) condition on the affected system's detection capabilities.

References