PT-2018-3313 · Cisco · Cisco Firepower System

Published 2018-04-19 · Updated 2024-11-26 · CVE-2018-0233

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions 6.0.0 and later

Description A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine could allow an unauthenticated, remote attacker to cause the detection engine to consume excessive system memory on an affected device, leading to a denial of service (DoS) condition. The vulnerability is due to the affected software improperly handling changes to SSL connection states. An attacker could exploit this vulnerability by sending crafted SSL connections through an affected device, potentially causing the device to require a manual reload to recover.

Recommendations For Cisco Firepower System Software versions 6.0.0 and later, update the software to a version that includes the fix for Cisco Bug ID CSCve23031. As a temporary workaround, consider restricting access to the detection engine or implementing additional monitoring to quickly identify and respond to potential DoS conditions.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2019-04680

CVE-2018-0233

Affected Products

Cisco Firepower System

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-0233 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fpsnort · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0233 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04680 · Security Note
• http://securityfocus.com/bid/103930 · Note