Memory Consumption Vulnerability in Cisco Firepower System Software
CVE-2018-0370

7.5HIGH

Key Information:

Vendor
Cisco
Status
Cisco Firepower Unknown
Vendor
CVE Published:
16 July 2018

Summary

A vulnerability in the detection engine of Cisco Firepower System Software allows an unauthenticated remote attacker to exploit improper handling of traffic during SSL inspection. By sending crafted malicious traffic, the attacker can cause a single instance of the Snort detection engine to run out of memory, leading to a slowdown in traffic processing and potential degradation of service. In severe cases, this could result in the automatic restart of the affected Snort process, severely impacting the network's performance.

Affected Version(s)

Cisco Firepower unknown Cisco Firepower unknown

References

https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/104728
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.