PT-2017-12422 · Cisco · Cisco Ftd

Published 2017-10-05 · Updated 2024-11-26 · CVE-2017-12245

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software versions 6.0.1 and later

Description A vulnerability in SSL traffic decryption could allow an unauthenticated, remote attacker to cause depletion of system memory, potentially leading to a denial of service (DoS) condition. This occurs due to an error in how the Firepower Detection Snort Engine handles SSL traffic decryption and notifications. An attacker could exploit this by sending malicious SSL traffic, causing the device to run low on system memory and potentially cease forwarding traffic.

Recommendations For Cisco Firepower Threat Defense (FTD) Software versions 6.0.1 and later, consider restricting SSL traffic to minimize the risk of exploitation until a patch is available. As a temporary workaround, limiting the amount of SSL traffic processed by the device may help mitigate the issue.

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

CWE-399

Related Identifiers

CVE-2017-12245

Affected Products

Cisco Ftd

References · 4

• https://osv.dev/vulnerability/CVE-2017-12245 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12245 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171004-ftd · Vendor Advisory
• http://securityfocus.com/bid/101118 · Note