Skip to content
fr Sign in
5.8 Medium

CVE-2026-20218 A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could…

Description

A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition.   This vulnerability is due to improper range checking when Snort 3 decompresses VBA data, which is user controlled. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine of a targeted device. A successful exploit could allow the attacker to cause an overflow of stack data, which could result in a DoS condition.

Affected products and versions

Product Affected versions Fixed in
Cisco Open Source Snort3 3.12 3.12.1.0 → 3.12.2.0 No fix stated
Cisco Open Source Snort3 3.11.1.0 No fix stated
Cisco Open Source Snort3 3.10 3.10.0.0 → 3.10.2.0 No fix stated
Cisco Open Source Snort3 3.9 3.9.0.0 → 3.9.7.0 No fix stated
Cisco Open Source Snort3 3.8.1.0 No fix stated
Cisco Open Source Snort3 3.7 3.7.0.0 → 3.7.4.0 No fix stated
Cisco Open Source Snort3 3.6 3.6.0.0 → 3.6.3.0 No fix stated
Cisco Open Source Snort3 3.5 3.5.0.0 → 3.5.2.0 No fix stated
Cisco Open Source Snort3 3.3 3.3.0.0 → 3.3.7.0 No fix stated
Show the 16 other branches
Product Affected versions Fixed in
Cisco Open Source Snort3 3.2 3.2.1.0 → 3.2.2.0 No fix stated
Cisco Open Source Snort3 3.1 3.1.2.0 → 3.1.84.0 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 10.0.0 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.7 7.7.0 → 7.7.11 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.6 7.6.0 → 7.6.4 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.4 7.4.0 → 7.4.7 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.3 7.3.0 → 7.3.1.2 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.2 7.2.0 → 7.2.11 No fix stated
Cisco UTD SNORT IPS Engine Software 26.1 26.1.1 → 26.1.2 No fix stated
Cisco UTD SNORT IPS Engine Software 17.18 17.18.1a → 17.18.4 No fix stated
Cisco UTD SNORT IPS Engine Software 17.17.1 No fix stated
Cisco UTD SNORT IPS Engine Software 17.16.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.15 17.15.1a → 17.15.6 No fix stated
Cisco UTD SNORT IPS Engine Software 17.14.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.13.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.12 17.12.1a → 17.12.8 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Open Source Snort3

The 13 CVEs of Cisco Open Source Snort3 →
CVE-2026-76524 A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated,… 7.8 High CVE-2026-76489 Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could… 5.8 Medium CVE-2026-76445 Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an… 5.3 Medium CVE-2026-20356 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3… 7.5 High
Track this CVE