CVE-2020-3317: Cisco Firepower Threat Defense Software SSL Input Validation Denial of Service Vulnerability
First published: Wed Oct 21 2020(Updated: )
A vulnerability in the ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to crash Snort instances. The vulnerability is due to insufficient input validation in the ssl_inspection component. An attacker could exploit this vulnerability by sending a malformed TLS packet through a Cisco Adaptive Security Appliance (ASA). A successful exploit could allow the attacker to crash a Snort instance, resulting in a denial of service (DoS) condition.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Threat Defense | <6.4.0.10 | |
| Cisco Firepower Threat Defense | >=6.5.0<6.5.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Firepower Threat Defense (FTD) Software vulnerability?
The vulnerability ID for this Cisco Firepower Threat Defense (FTD) Software vulnerability is CVE-2020-3317.
What is the severity of CVE-2020-3317?
The severity of CVE-2020-3317 is high with a CVSS score of 7.5.
What component of Cisco Firepower Threat Defense (FTD) Software is affected by CVE-2020-3317?
The ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software is affected by CVE-2020-3317.
How can an attacker exploit CVE-2020-3317?
An attacker can exploit CVE-2020-3317 by sending malicious input to the ssl_inspection component, leading to a crash in Snort instances.
How can I fix CVE-2020-3317?
To fix CVE-2020-3317, it is recommended to update to a version of Cisco Firepower Threat Defense (FTD) Software that is not affected by the vulnerability.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/references
- agent/author
- agent/title
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco firepower threat defense
- version/cisco firepower threat defense/6.5.0