PT-2016-6913 · Cisco · Cisco Firepower System

Published 2016-10-27 · Updated 2024-11-26 · CVE-2016-6439

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions prior to 6.0.1

Description A denial of service condition can occur due to improper handling of an HTTP packet stream, allowing an unauthenticated, remote attacker to cause the Snort process to restart unexpectedly. This can be exploited by sending a crafted HTTP packet stream to the detection engine, potentially bypassing traffic inspection or dropping traffic.

Recommendations For versions prior to 6.0.1, update to version 6.0.1 or later to resolve the issue. As a temporary workaround, consider implementing measures to restrict or monitor HTTP packet streams to the detection engine to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-6439

Affected Products

Cisco Firepower System

References · 5

• https://osv.dev/vulnerability/CVE-2016-6439 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-fpsnort · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6439 · Security Note
• http://securitytracker.com/id/1037061 · Note
• http://securityfocus.com/bid/93787 · Note