Skip to content
OpenAdvisories
High WID-SEC-2023-0335 2 CVEs

Cisco Firepower und Snort: Mehrere Schwachstellen ermöglichen Denial of Service

Published Oct 27, 2021 · Updated Feb 12, 2023 · Revision 2 · de-DE

Vendor: Cisco Vendor: Debian Product: Firepower Product: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Firepower und Snort ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Firepower ist eine Firewall-Plattform von Cisco
Snort ist ein freies Network Intrusion Prevention System (NIPS) und ein Network Intrusion Detection System (NIDS) der Firma Sourcefire.

Vulnerabilities 2

  • High 8.6
    CVE-2021-40116

    Multiple Cisco Products Snort Rule Denial of Service Vulnerability

    Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to improper handling of the Block with Rese…

    Cisco Cisco Firepower Threat Defense Software Network devices
  • Medium 6.8
    CVE-2021-40114

    Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability

    Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is …

    Cisco Cisco Firepower Threat Defense Software snort snort Network devices Ubuntu Alpine

Revision history

  1. #2

    Neue Updates von Debian aufgenommen

  2. #1

    Initiale Fassung

References