5.8
Moyenne
CVE-2026-20052 A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat…
Description
A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a logic error in memory management when a device is performing Snort 3 SSL packet inspection. An attacker could exploit this vulnerability by sending crafted SSL packets through an established connection to be parsed by the Snort 3 Detection Engine. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.0 | Pas de correctif indiqué |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.4 | 7.4.0 → 7.4.2.1 | Pas de correctif indiqué |
Références
- cisco-sa-ftd-snort3ssl-FBEKYXpH sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Secure Firewall Threat Defense (FTD) Software
Les 81 CVE de Cisco Secure Firewall Threat Defense (FTD) Software →
CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
8.6
Élevée
CVE-2026-76489
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could…
5.8
Moyenne
CVE-2026-76445
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an…
5.3
Moyenne
CVE-2026-20356
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…
7.5
Élevée