Cisco Snort 3 の資源枯渇により サービス妨害のおそれ
Summary
Cisco Snort 3 に、リソースを使い果たす状態を引き起こす脆弱性が見つかりました。影響を受ける製品には Cisco Cyber Vision、Cisco Open Source Snort3、Cisco Secure Firewall Threat Defense (FTD) Software、Cisco UTD SNORT IPS Engine Software があります。修正を含むソフトウェアが公開されていますので、最新の情報を確認してください。
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
Cisco Snort 3 に、リソースを使い果たす状態を引き起こす脆弱性が見つかりました。影響を受ける製品には Cisco Cyber Vision、Cisco Open Source Snort3、Cisco Secure Firewall Threat Defense (FTD) Software、Cisco UTD SNORT IPS Engine Software があります。修正を含むソフトウェアが公開されていますので、最新の情報を確認してください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Cyber Vision | — | — |
| Cisco | Cisco Open Source Snort3 | — | — |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | — | — |
| Cisco | Cisco UTD SNORT IPS Engine Software | — | — |
Original description The description as published by the source.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20356 are related to issues concerning uncontrolled resource consumption that are grouped under the Common Weakness Enumeration (CWE) Base CWE-400.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web psirt@cisco.com
- web nvd.nist.gov
- web github.com