PT-2017-16157 · Cisco · Cisco Firepower System

Published 2017-04-07 · Updated 2019-10-03 · CVE-2017-3887

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions prior to 6.2.0

Description A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process unexpectedly restarts. This issue affects systems configured with an SSL Decrypt-Resign policy.

Recommendations For versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue. For version 6.1.0, update to version 6.1.0.2 or later to resolve the issue.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2017-3887

Affected Products

Cisco Firepower System

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-3887 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3887 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw1 · Vendor Advisory
• http://securityfocus.com/bid/97453 · Note