PT-2021-5005 · Cisco · Cisco Ios Xe Sd-Wan+2

Santosh Krishnamurthy · Published 2021-10-27 · Updated 2024-11-26 · CVE-2021-40114

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions (affected versions not specified) Cisco Firepower Threat Defense (FTD) versions (affected versions not specified) Cisco IOS XE SD-WAN versions (affected versions not specified)

Description The issue is related to improper memory resource management in the Snort detection engine when processing ICMP traffic. This could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device by sending a series of ICMP packets. A successful exploit could allow the attacker to exhaust resources on the affected device, causing it to reload.

Recommendations For Cisco IOS XE, update to a version that includes the fix for the improper memory resource management issue. For Cisco Firepower Threat Defense (FTD), consider disabling the Snort detection engine until a patch is available. For Cisco IOS XE SD-WAN, restrict access to the affected device to minimize the risk of exploitation until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Memory Leak

Weakness Enumeration

CWE-770

CWE-401

Related Identifiers

BDU:2021-05772

CVE-2021-40114

DLA-3317-1

DSA-5354-1

MGASA-2023-0117

Affected Products

Cisco Ftd

Cisco Ios Xe

Cisco Ios Xe Sd-Wan

References · 23

• https://osv.dev/vulnerability/DSA-5354-1 · Vendor Advisory
• https://debian.org/lts/security/2023/dla-3317 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0117.html · Security Note
• https://osv.dev/vulnerability/MGASA-2023-0117 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-40114 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-dos-s2R7W9UU · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05772 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-40114 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2021-40114 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-40114 · Vendor Advisory
• https://debian.org/security/2023/dsa-5354 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40114 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40114 · Vendor Advisory
• https://t.me/cvenotify/22510 · Telegram Post