Cisco Snort 3 関連製品に重大な脆弱性、修正版あり
Summary
Cisco が Snort 3 の社内セキュリティレビューで見つけた、メモリの範囲外書き込み(CWE-787)に関する複数の脆弱性に対し、強化版(hardening release)を公開しました。Snort 3 を使う Cisco Secure Firewall Threat Defense(FTD)、Cisco Cyber Vision などの利用組織が対象になり得ます。まず自社の製品と版を確認し、Cisco の公式アドバイザリに従って修正版へ更新してください。
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
Cisco が Snort 3 の社内セキュリティレビューで見つけた、メモリの範囲外書き込み(CWE-787)に関する複数の脆弱性に対し、強化版(hardening release)を公開しました。Snort 3 を使う Cisco Secure Firewall Threat Defense(FTD)、Cisco Cyber Vision などの利用組織が対象になり得ます。まず自社の製品と版を確認し、Cisco の公式アドバイザリに従って修正版へ更新してください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Cyber Vision | — | — |
| Cisco | Cisco Open Source Snort3 | — | — |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | — | — |
| Cisco | Cisco UTD SNORT IPS Engine Software | — | — |
Original description The description as published by the source.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20043 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- CISCO sec.cloudapps.cisco.com
- CISCO sec.cloudapps.cisco.com
- web psirt@cisco.com
- web nvd.nist.gov
- web github.com