CVE Vulnerability Catalog

A vulnerability in the ingress packet processing path of Cisco FTD Software for interfaces configured as Inline Pair or in Passive mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS). The issue is due to insufficient validation when processing Ethernet frames. An attacker could exploit this by sending malicious Ethernet frames. Consequences may include filling the /ngfw partition, preventing login and boot, or causing a process crash leading to reload.

A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. It is due to a memory leak when closing SSL/TLS connections in a specific state. An attacker could exploit this by establishing several SSL/TLS sessions and ensuring they are closed under certain conditions.

A vulnerability in the ICMP ingress packet processing of Cisco Firepower Threat Defense (FTD) Software for Firepower 4110 appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS). The issue is due to incomplete input validation upon receiving ICMP packets. Exploitation involves sending a high number of crafted ICMP or ICMPv6 packets.

A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS). The issue is due to inefficient memory management. Exploitation involves sending a large number of TCP packets to a specific port.

A vulnerability in the SSL/TLS inspection of Cisco Firepower Threat Defense (FTD) Software for Firepower 2100 Series firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The issue is due to improper input validation for certain fields of SSL/TLS messages.

A vulnerability in the TCP packet processing of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. The issue is due to a memory exhaustion condition. An attacker could exploit this by sending a high rate of crafted TCP traffic, potentially exhausting device resources and causing DoS for transiting traffic.

A vulnerability in the sfmgr daemon of Cisco FMC and FTD Software could allow an authenticated, remote attacker to perform directory traversal and access directories outside the restricted path. The issue is due to insufficient input validation. An attacker could exploit this by using a relative path in specific sfmgr commands, potentially allowing arbitrary file read or write on an sftunnel-connected peer device.

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to obtain the device registration hash. This is due to insufficient sftunnel negotiation protection during initial device registration. An attacker in a man-in-the-middle position could intercept and modify sftunnel communication between FMC and FTD, potentially altering configuration or alert data.

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly. It is due to a lack of sufficient memory management protections under heavy SNMP polling loads. An attacker could exploit this by sending a high rate of SNMP requests to the SNMP daemon through the management interface.

A vulnerability in the SSL VPN negotiation process for Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The issue is due to inefficient DMA memory management during SSL VPN negotiation.

A vulnerability in the OSPFv2 implementation of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to reload the device, causing a denial of service (DoS). The issue is due to incomplete input validation when processing OSPFv2 packets with LLS data. Exploitation involves sending a malformed OSPFv2 packet.

A vulnerability in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. The issue is due to insufficient protections on a configuration file used at container startup. An attacker could modify this file, leading to root command execution and impacting other FTD instances or the host Cisco FXOS device.

A vulnerability in the web services interface of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files to specific folders, leading to an unexpected device reload. The issue is due to inefficient handling of large file writes. An attacker could upload files to trigger a watchdog timeout, causing device reload and DoS.

A vulnerability in the IP fragment-handling implementation of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. This memory leak could prevent traffic from being processed, resulting in a denial of service (DoS) condition. The issue is due to improper error handling during IP fragment reassembly.

A vulnerability in the ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to crash Snort instances. This is due to insufficient input validation in the ssl_inspection component. An attacker could exploit this by sending a malformed TLS packet through a Cisco Adaptive Security Appliance (ASA), leading to a denial of service (DoS) condition.

A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. An exploit could cause a DoS condition. This applies to IPv4 and IPv6 HTTP traffic.

Istnieje podatność na odmowę usługi w Microsoft Hyper-V, gdy serwer hosta nieprawidłowo weryfikuje złośliwe dane od użytkownika w systemie operacyjnym gościa. Atakujący z uprzywilejowanym kontem na systemie gościa może uruchomić specjalnie przygotowaną aplikację, aby wykorzystać tę podatność.

Występuje podatność na zdalne wykonanie kodu w sposobie, w jaki komponenty graficzne Microsoftu obsługują obiekty w pamięci. Atakujący, który skutecznie wykorzysta tę podatność, może wykonać dowolny kod na docelowym systemie.