漏洞标题
Cisco Firepower威胁防御软件SSL或TLS拒绝服务漏洞
漏洞描述信息
Cisco Firepower 威胁防御软件的检测引擎存在漏洞，未经身份验证的远程攻击者可利用该漏洞导致 SNORT 检测引擎意外重启，从而引发拒绝服务 (DoS) 状态。该漏洞是由于在建立连接时无法正确处理 SSL 或 TLS 数据包头。攻击者可能在连接握手过程中发送精心构造的 SSL 或 TLS 数据包来利用此漏洞。成功的利用可能导致 SNORT 检测引擎意外重启，检测引擎重启期间会导致部分拒绝服务状态。此漏洞影响版本 6.2.3.4 之前的软件。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
漏洞类别
N/A
漏洞标题
Cisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability
漏洞描述信息
A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service (DoS) condition. The vulnerability is due to the incomplete error handling of the SSL or TLS packet header during the connection establishment. An attacker could exploit this vulnerability by sending a crafted SSL or TLS packet during the connection handshake. An exploit could allow the attacker to cause the SNORT detection engine to unexpectedly restart, resulting in a partial DoS condition while the detection engine restarts. Versions prior to 6.2.3.4 are affected.
CVSS信息
N/A
漏洞类别
输入验证不恰当
漏洞标题
Cisco Firepower Threat Defense 输入验证错误漏洞
漏洞描述信息
Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。 Cisco FTD中的检测引擎存在输入验证漏洞。远程攻击者可通过发送特制的SSL或TLS数据包利用该漏洞重启SNORT检测器，造成拒绝服务。
CVSS信息
N/A
漏洞类别
输入验证错误