PT-2017-12422 · Cisco · Cisco Ftd

CVE-2017-12245 · Publicado 2017-10-05 · Atualizado 2024-11-26

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software versions 6.0.1 and later

Description A vulnerability in SSL traffic decryption could allow an unauthenticated, remote attacker to cause depletion of system memory, potentially leading to a denial of service (DoS) condition. This occurs due to an error in how the Firepower Detection Snort Engine handles SSL traffic decryption and notifications. An attacker could exploit this by sending malicious SSL traffic, causing the device to run low on system memory and potentially cease forwarding traffic.

Recommendations For Cisco Firepower Threat Defense (FTD) Software versions 6.0.1 and later, consider restricting SSL traffic to minimize the risk of exploitation until a patch is available. As a temporary workaround, limiting the amount of SSL traffic processed by the device may help mitigate the issue.

Correção

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

CWE-399

Identificadores relacionados

CVE-2017-12245

Produtos afetados

Cisco Ftd

Referências · 4

• http://securityfocus.com/bid/101118 · Nota
• https://osv.dev/vulnerability/CVE-2017-12245 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12245 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ftd · Aviso do Fabricante