5.8
Moyenne
CVE-2026-20026 Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an…
Description
Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer use-after-free read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to unexpectedly restart the Snort 3 Detection Engine, which could cause a denial of service (DoS).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Firewall Threat Defense (FTD) Software 7.7 | 7.7.0 → 7.7.10.1 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.6 | 7.6.0 → 7.6.2.1 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.4 | 7.4.0 → 7.4.3 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.3 | 7.3.0 → 7.3.1.2 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.2 | 7.2.0 → 7.2.10.2 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.1 | 7.1.0 → 7.1.0.3 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.0 | 7.0.0 → 7.0.8.1 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.18 | 17.18.1a → 17.18.2 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.17.1 | Pas de correctif indiqué |
Afficher les 19 autres branches Masquer les 19 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco UTD SNORT IPS Engine Software | 17.16.1a | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.15 | 17.15.1a → 17.15.4 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.14.1a | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.13.1a | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.12 | 17.12.1a → 17.12.6 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.11.1a | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.10.1a | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.9 | 17.9.1a → 17.9.8 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.8.1a | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.7 | 17.7.1a → 17.7.2 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.6 | 17.6.1a → 17.6.8 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.5 | 17.5.1a → 17.5.1 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.4 | 17.4.1a → 17.4.2 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 17.3 | 17.3.1a → 17.3.8 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.2.1r | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software | 17.1.1 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 16.12 | 16.12.1a → 16.12.8 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 16.6 | 16.6.1 → 16.6.10 | Pas de correctif indiqué |
| Cisco UTD SNORT IPS Engine Software 3.17 | 3.17.0S → 3.17.1S | Pas de correctif indiqué |
Références
- cisco-sa-snort3-dcerpc-vulns-J9HNF4tH sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Secure Firewall Threat Defense (FTD) Software
Les 81 CVE de Cisco Secure Firewall Threat Defense (FTD) Software →
CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
8.6
Élevée
CVE-2026-76489
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could…
5.8
Moyenne
CVE-2026-76445
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an…
5.3
Moyenne
CVE-2026-20356
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…
7.5
Élevée