SB2024102364 - Remote denial of service in Cisco Firepower Threat Defense Software and Cisco FirePOWER Services
Published: October 23, 2024
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Resource exhaustion (CVE-ID: CVE-2024-20351)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in the TCP/IP traffic handling function of the Snort Detection Engine. A remote attacker can send a large amount of TCP/IP network traffic through the affected device, trigger resource exhaustion and perform a denial of service (DoS) attack.
Note, this vulnerability affects Cisco products if they are running a vulnerable release of Cisco FTD Software or Cisco FirePOWER Services and have either Snort 2 or Snort 3 enabled.
Remediation
Install update from vendor's website.