PT-2017-16157 · Cisco · Cisco Firepower System

Publicado 2017-04-07 · Atualizado 2019-10-03 · CVE-2017-3887

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions prior to 6.2.0

Description A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process unexpectedly restarts. This issue affects systems configured with an SSL Decrypt-Resign policy.

Recommendations For versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue. For version 6.1.0, update to version 6.1.0.2 or later to resolve the issue.

Correção

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2017-3887

Produtos afetados

Cisco Firepower System

Referências · 4

• http://securityfocus.com/bid/97453 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3887 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-3887 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw1 · Aviso do Fabricante