CVE-2019-1691— Cisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability

Cisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability

A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service (DoS) condition. The vulnerability is due to the incomplete error handling of the SSL or TLS packet header during the connection establishment. An attacker could exploit this vulnerability by sending a crafted SSL or TLS packet during the connection handshake. An exploit could allow the attacker to cause the SNORT detection engine to unexpectedly restart, resulting in a partial DoS condition while the detection engine restarts. Versions prior to 6.2.3.4 are affected.

N/A

输入验证不恰当

Cisco Firepower Threat Defense 输入验证错误漏洞

Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。 Cisco FTD中的检测引擎存在输入验证漏洞。远程攻击者可通过发送特制的SSL或TLS数据包利用该漏洞重启SNORT检测器，造成拒绝服务。

N/A

N/A