Description
Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to improper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to enter an infinite loop, causing a DoS condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco Cyber Vision
Default version status: unknown
3.0.0affected3.0.2affected3.0.3affected3.0.1affected3.1.0affected3.0.4affected3.1.1affected3.1.2affected3.2.0affected3.0.5affected3.2.1affected3.0.6affected3.2.2affected3.2.3affected3.2.4affected4.0.0affected4.0.1affected4.0.2affected4.0.3affected4.1.0affected4.1.1affected4.1.2affected4.1.3affected4.1.4affected4.2.0affected4.2.1affected4.1.5affected4.2.2affected4.2.Xaffected4.2.3affected4.2.4affected4.2.6affected4.1.6affected4.3.0affected4.3.1affected4.3.2affected4.3.3affected4.4.0affected4.4.1affected4.4.2affected4.4.3affected4.1.7affected5.0.0affected5.0.1affected5.0.2affected5.1.0affected5.1.1affected5.1.2affected5.1.3affected5.2.0affected5.2.1affected5.3.0affected5.3.1affected5.3.2affected
Cisco Cisco Secure Firewall Threat Defense (FTD) Software
Default version status: unknown
7.2.0affected7.2.0.1affected7.2.1affected7.3.0affected7.2.2affected7.2.3affected7.3.1affected7.2.4affected7.2.5affected7.2.4.1affected7.3.1.1affected7.4.0affected7.2.5.1affected7.4.1affected7.2.6affected7.4.1.1affected7.2.7affected7.2.5.2affected7.3.1.2affected7.2.8affected7.6.0affected7.4.2affected7.2.8.1affected7.4.2.1affected7.2.9affected7.7.0affected7.4.2.2affected7.2.10affected7.6.1affected7.4.2.3affected7.6.2affected7.7.10affected7.6.2.1affected7.7.10.1affected7.4.2.4affected7.2.10.2affected7.4.3affected
Cisco Cisco UTD SNORT IPS Engine Software
Default version status: unknown
3.17.1Saffected16.12.3affectedFuji-16.9.5affected16.12.4affected17.3.1aaffected16.6.6affected16.12.2affectedFuji-16.9.6affected3.17.0SaffectedFuji-16.9.3affectedDenali-16.3.7affectedFuji-16.9.2affectedFuji-16.9.4affectedEverest-16.6.4affectedEverest-16.6.3affected16.6.5affectedDenali-16.3.5affected17.2.1raffected17.1.1affectedEverest-16.6.2affected16.6.7aaffectedDenali-16.3.4affected16.6.1affectedDenali-16.3.9affectedDenali-16.3.3affected16.12.1aaffected17.3.2affected17.4.1aaffected16.12.5affected17.5.1affectedFuji-16.9.7affected16.6.9affected17.3.3affected17.5.1aaffected17.3.4affected17.3.4aaffected17.4.2affected17.4.1baffected17.6.1aaffected16.6.10affected17.7.1aaffected16.12.6affectedFuji-16.9.8affected17.6.2affected17.8.1aaffected16.12.7affected17.3.5affected17.6.3affected17.6.3aaffected17.7.2affected17.9.1aaffected17.6.4affected17.10.1aaffected17.3.6affected16.12.8affected17.3.7affected17.9.2aaffected17.6.5affected17.11.1aaffected17.9.3aaffected17.12.1aaffected17.9.4affected17.6.6affected17.3.8affected17.3.8aaffected17.6.6aaffected17.9.4aaffected17.12.2affected17.13.1aaffected17.9.5aaffected17.12.3affected17.6.7affected17.14.1aaffected17.12.4affected17.12.3aaffected17.15.1aaffected17.6.8affected17.9.6affected17.6.8aaffected17.16.1aaffected17.9.5eaffected17.12.4aaffected17.15.2caffected17.9.5faffected17.12.4baffected17.15.2aaffected17.12.5affected17.17.1affected17.12.5aaffected17.9.7aaffected17.15.3aaffected17.15.3affected17.12.5baffected17.12.5caffected17.15.4affected17.9.7baffected17.18.1affected17.18.1aaffected17.12.6affected17.9.8affected17.15.4caffected17.12.5daffected17.18.2affected