Heap Inspection in Sourcefire products - CVE-2022-20922
Published: November 11, 2022
Vulnerability identifier: #VU69244
CSH Severity: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2022-20922
CWE-ID: CWE-244
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Cyber Vision
FirePOWER Services
Umbrella Secure Internet Gateway
Meraki MX Security Appliances
Snort
Cisco Firewall Threat Defense (FTD)
Cyber Vision
FirePOWER Services
Umbrella Secure Internet Gateway
Meraki MX Security Appliances
Snort
Cisco Firewall Threat Defense (FTD)
Software vendor:
Cisco Systems, Inc
Sourcefire
Cisco Systems, Inc
Sourcefire
Description
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of system resources in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
Remediation
Install updates from vendor's website.