PT-2017-16156 · Cisco · Cisco Firepower System

CVE-2017-3885 · Publicado 2017-04-07 · Atualizado 2024-11-26

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions 6.0.0 through 6.2.1

Description A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process consumes a high level of CPU resources. This issue occurs when the device is configured with an SSL policy that has at least one rule specifying traffic decryption.

Recommendations For versions 6.0.0 through 6.2.1, consider disabling the SSL policy that has at least one rule specifying traffic decryption as a temporary workaround to minimize the risk of exploitation. Restrict access to the Snort process to prevent high CPU resource consumption.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2017-3885

Produtos afetados

Cisco Firepower System

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-3885 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3885 · Nota de Segurança
• http://securityfocus.com/bid/97451 · Nota