漏洞标题
N/A
漏洞描述信息
"Cisco Firepower System Software中的检测引擎的安全套接字层(SSL)包重新组装功能中的一个漏洞可能导致未授权的远程攻击者在使用受影响的设备上导致检测引擎消耗过多的系统内存，从而触发拒绝服务(DoS)情况。该漏洞是由于受影响的软件处理SSL连接状态变化不当。攻击者可以通过通过受影响的设备发送精心构造的SSL连接来利用此漏洞。成功利用此漏洞可能导致攻击者导致受影响设备上的检测引擎消耗过多的系统内存，从而触发DoS情况。设备可能需要手动重新加载才能从此情况中恢复。此漏洞影响Cisco Firepower System Software版本6.0.0及其后续版本，运行在以下Cisco产品上：自适应安全设备(ASA)5500-X系列防火墙带有火焰力量服务，自适应安全设备(ASA)5500-X系列下一代防火墙，高级网络Malware保护(AMP),7000系列设备，高级网络Malware保护(AMP),8000系列设备，火焰力量4100系列设备，火焰力量7000系列设备，火焰力量8000系列设备，火焰力量9300系列安全设备，集成服务路由器(ISR)火焰力量防御，VMware上的火焰力量防御虚拟，工业安全设备3000,Sourcefire 3D系统设备。Cisco Bug ID: CSCve23031。"
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the detection engine to consume excessive system memory on an affected device, which could cause a denial of service (DoS) condition. The vulnerability is due to the affected software improperly handling changes to SSL connection states. An attacker could exploit this vulnerability by sending crafted SSL connections through an affected device. A successful exploit could allow the attacker to cause the detection engine to consume excessive system memory on the affected device, which could cause a DoS condition. The device may need to be reloaded manually to recover from this condition. This vulnerability affects Cisco Firepower System Software Releases 6.0.0 and later, running on any of the following Cisco products: Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services, Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances, Advanced Malware Protection (AMP) for Networks, 8000 Series Appliances, Firepower 4100 Series Appliances, FirePOWER 7000 Series Appliances, FirePOWER 8000 Series Appliances, Firepower 9300 Series Security Appliances, Firepower Threat Defense for Integrated Services Routers (ISRs), Firepower Threat Defense Virtual for VMware, Industrial Security Appliance 3000, Sourcefire 3D System Appliances. Cisco Bug IDs: CSCve23031.
CVSS信息
N/A
漏洞类别
未加控制的资源消耗(资源穷尽)
漏洞标题
多款Cisco产品Firepower System Software detection引擎安全漏洞
漏洞描述信息
Cisco Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services等都是美国思科（Cisco）公司的安全防火墙设备。Firepower System Software是其中的一套防火墙操作系统。detection engine是其中的一个入侵检测引擎。 多款Cisco产品中的Firepower System Software 6.0.0及之后的版本中detection引擎的安全套接层协议数据包重组功
CVSS信息
N/A
漏洞类别
资源管理错误