SB2019022212 - Denial of service in Cisco Firepower 9000 Series

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019022212

SB2019022212 - Denial of service in Cisco Firepower 9000 Series

Published: February 22, 2019

Security Bulletin ID SB2019022212
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Input validation error (CVE-ID: CVE-2019-1700)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows an adjacent attacker to perform a denial of service (DoS) attack.

The vulnerability exists in field-programmable gate array (FPGA) ingress buffer management due to a logic error in the FPGA related to the processing of different types of input packet. An adjacent attacker can send a specially crafted sequence of input packets to a specific interface on an affected device, cause a queue wedge condition on the interface and cause the affected device to stop processing any additional packets that are received on the wedged interface.


Remediation

Install update from vendor's website.

References