Multiple Cisco products are affected by a vulnerability in the memory management implementation...
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| Cisco | Cisco Open Source Snort3 | — | — |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | — | — |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
参照URL
- web psirt@cisco.com
- web nvd.nist.gov
- web github.com