PT-2023-8662 · Cisco · Snort 2 Detection Engine+1

Sanmith Prakash · Publicado 2023-11-01 · Atualizado 2024-01-25 · CVE-2023-20083

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description The issue is related to improper error checking when parsing fields within the ICMPv6 header, which could allow an unauthenticated, remote attacker to cause the CPU of an affected device to spike to 100 percent. This could stop all traffic processing and result in a denial of service (DoS) condition. FTD management traffic is not affected by this issue. An attacker could exploit this by sending a crafted ICMPv6 packet through an affected device, causing the device to exhaust CPU resources and stop processing traffic.

Recommendations To resolve the issue, restart the Snort 2 Detection Engine or the Cisco FTD device to recover from the DoS condition. As a temporary workaround, consider restricting access to the ICMPv6 inspection feature until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

BDU:2024-01407

CVE-2023-20083

Produtos afetados

Cisco Ftd

Snort 2 Detection Engine

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-20083 · Nota de Segurança
• https://twitter.com/CVEnew/status/1719768412161757448 · Publicação no Twitter
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-icmpv6-dos-4eMkLuN · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-20083 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-01407 · Nota de Segurança