CVE-2018-0370
First published: Mon Jul 16 2018(Updated: )
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause one of the detection engine processes to run out of memory and thus slow down traffic processing. The vulnerability is due to improper handling of traffic when the Secure Sockets Layer (SSL) inspection policy is enabled. An attacker could exploit this vulnerability by sending malicious traffic through an affected device. An exploit could allow the attacker to increase the resource consumption of a single instance of the Snort detection engine on an affected device. This will lead to performance degradation and eventually the restart of the affected Snort process. Cisco Bug IDs: CSCvi09219, CSCvi29845.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Management Center | =6.1.0.7 | |
| Cisco Secure Firewall Management Center | =6.2.0.5 | |
| Cisco Secure Firewall Management Center | =6.2.2.2 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.1.0.7 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.2.0.5 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.2.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0370?
CVE-2018-0370 is rated as a medium severity vulnerability due to its potential impact on traffic processing.
How does CVE-2018-0370 impact Cisco Firepower System Software?
CVE-2018-0370 allows an unauthenticated, remote attacker to exhaust memory in the detection engine, causing performance degradation.
What versions of Cisco software are affected by CVE-2018-0370?
CVE-2018-0370 affects specific versions of Cisco Secure Firewall Management Center and Cisco Firepower Management Center Software, including 6.1.0.7, 6.2.0.5, and 6.2.2.2.
How do I fix CVE-2018-0370?
To remediate CVE-2018-0370, users should upgrade to a patched version of the affected Cisco software.
Is user authentication required to exploit CVE-2018-0370?
No, CVE-2018-0370 can be exploited by an unauthenticated, remote attacker.
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.1.0.7
- version/cisco secure firewall management center/6.2.0.5
- version/cisco secure firewall management center/6.2.2.2
- canonical/cisco firepower management center (fmc) and firepower threat defense (ftd) software
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.1.0.7
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.2.0.5
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.2.2.2