Denial of Service Vulnerability in Cisco Firepower System Software

CVE-2018-0385

What is CVE-2018-0385?

A vulnerability exists within the SSL protocol packet detection engine of Cisco Firepower System Software that could allow an unauthenticated remote attacker to trigger a denial of service (DoS) condition. This vulnerability arises from inadequate input handling of SSL traffic, leading to unintended restarts of the Snort process. An attacker could exploit this flaw by sending maliciously crafted SSL traffic to the detection engine on affected devices, resulting in a potential bypass of traffic inspection or the dropping of traffic altogether. This vulnerability affects various models within the Firepower series, and timely patching is recommended to mitigate risks.

References