Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-3826

EPSS 0.43% · P63
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-3826

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (NGA) with software before 1.1(1a) could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, causing a denial of service (DoS) condition. The vulnerability is due to incomplete validation of SCTP packets being monitored on the NGA data ports. An attacker could exploit this vulnerability by sending malformed SCTP packets on a network that is monitored by an NGA data port. SCTP packets addressed to the IP address of the NGA itself will not trigger this vulnerability. An exploit could allow the attacker to cause the appliance to become unresponsive or reload, causing a DoS condition. User interaction could be needed to recover the device using the reboot command from the CLI. The following Cisco NetFlow Generation Appliances are vulnerable: NGA 3140, NGA 3240, NGA 3340. Cisco Bug IDs: CSCvc83320.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
资源管理错误
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco NetFlow Generation Appliance 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco NetFlow Generation Appliance（NGA）是美国思科（Cisco）公司的一套可扩展的用于数据中心实现流量可见性的解决方案。该方案提供流量分析和其他需求管理等功能。Stream Control Transmission Protocol（SCTP）decoder是其中的一个流控制传输协议解码器。 Cisco NGA 3140版本、3240版本和3340版本中的SCTP decoder存在拒绝服务漏洞。远程攻击者可通过发送特制的SCTP数据包利用该漏洞造成设备挂起或重载，导
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Cisco NetFlow Generation Appliance Cisco NetFlow Generation Appliance -

II. Public POCs for CVE-2017-3826

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-3826

Please Login to view more intelligence information

Same Patch Batch · n/a · 2017-03-01 · 49 CVEs total

CVE-2017-5851Mp3splt 安全漏洞
CVE-2017-5854PoDoFo 安全漏洞
CVE-2017-5886PoDoFo 缓冲区错误漏洞
CVE-2017-5977ZZIPlib 安全漏洞
CVE-2017-5978ZZIPlib 安全漏洞
CVE-2017-5979ZZIPlib 安全漏洞
CVE-2017-5980ZZIPlib 安全漏洞
CVE-2017-5981ZZIPlib 安全漏洞
CVE-2017-5976ZZIPlib 缓冲区错误漏洞
CVE-2017-5852PoDoFo 安全漏洞
CVE-2017-5853PoDoFo 数字错误漏洞
CVE-2017-5666Mp3splt 安全漏洞
CVE-2017-5665libmp3splt 安全漏洞
CVE-2017-5504JasPer 缓冲区错误漏洞
CVE-2017-5503JasPer 缓冲区错误漏洞
CVE-2017-5502JasPer 安全漏洞
CVE-2017-5501JasPer 数字错误漏洞
CVE-2017-5500JasPer 安全漏洞
CVE-2017-5499JasPer 数字错误漏洞
CVE-2017-5498JasPer 数字错误漏洞

Showing top 20 of 49 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: n/a
Same weakness: CWE-399

V. Comments for CVE-2017-3826

No comments yet

Leave a comment