Denial of Service Vulnerability in Cisco Firepower System Software

CVE-2018-0385

What is CVE-2018-0385?

A vulnerability exists within the SSL protocol packet detection engine of Cisco Firepower System Software that could allow an unauthenticated remote attacker to trigger a denial of service (DoS) condition. This vulnerability arises from inadequate input handling of SSL traffic, leading to unintended restarts of the Snort process. An attacker could exploit this flaw by sending maliciously crafted SSL traffic to the detection engine on affected devices, resulting in a potential bypass of traffic inspection or the dropping of traffic altogether. This vulnerability affects various models within the Firepower series, and timely patching is recommended to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References