CVE-2020-3571— Cisco Firepower Threat Defense 输入验证错误漏洞

Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability

A vulnerability in the ICMP ingress packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 4110 appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incomplete input validation upon receiving ICMP packets. An attacker could exploit this vulnerability by sending a high number of crafted ICMP or ICMPv6 packets to an affected device. A successful exploit could allow the attacker to cause a memory exhaustion condition that may result in an unexpected reload. No manual intervention is needed to recover the device after the reload.

N/A

未加控制的资源消耗(资源穷尽)

Cisco Firepower Threat Defense 输入验证错误漏洞

Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。 Cisco Firepower Threat Defense (FTD) 存在安全漏洞，该漏洞源于在接收到ICMP数据包时不完整的输入验证造成的。攻击者可利用该漏洞可以通过向受影响的设备发送大量精心制作的ICMP或ICMPv6包来利用此漏洞。成功的利用可能使攻击者可利用该漏洞导致内存耗尽，从而导致意外的重新加载。

N/A

N/A