漏洞标题
N/A
漏洞描述信息
Cisco Firepower Threat Defense (FTD)软件TLS 1.3实现中的漏洞可能导致未授权的远程攻击者意外重启Snort 3检测引擎。此漏洞源于TLS 1.3会话中内存分配的逻辑错误。在特定的时间约束下，攻击者可以通过通过受影响的设备发送精心构造的TLS 1.3消息序列来利用此漏洞。成功利用此漏洞可能导致攻击者使Snort 3检测引擎重新加载，从而导致拒绝服务(DoS)条件。在Snort检测引擎重新加载的同时，经过FTD设备发送给Snort检测引擎的 packets 将被丢弃。Snort检测引擎将自动重启，不需要手动干预。
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
不加限制或调节的资源分配
漏洞标题
N/A
漏洞描述信息
A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability is due to a logic error in how memory allocations are handled during a TLS 1.3 session. Under specific, time-based constraints, an attacker could exploit this vulnerability by sending a crafted TLS 1.3 message sequence through an affected device. A successful exploit could allow the attacker to cause the Snort 3 detection engine to reload, resulting in a denial of service (DoS) condition. While the Snort detection engine reloads, packets going through the FTD device that are sent to the Snort detection engine will be dropped. The Snort detection engine will restart automatically. No manual intervention is required.
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L
漏洞类别
在释放前清理堆内存不恰当(堆检查)
漏洞标题
Cisco Firepower Threat Defense 安全漏洞
漏洞描述信息
Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。 Cisco Firepower Threat Defense存在安全漏洞，该漏洞源于TLS 1.3 会话期间处理内存分配的逻辑错误，攻击者利用该漏洞可能导致 Snort 3 检测引擎意外重启。
CVSS信息
N/A
漏洞类别
其他