What is the severity of CVE-2021-1494?

CVE-2021-1494 has been assigned a medium severity rating due to its potential to allow unauthorized file policy bypass.

How do I fix CVE-2021-1494?

To fix CVE-2021-1494, update the Snort package to versions 2.9.20-0+deb10u1 or 2.9.20-0+deb11u1 or higher.

What products are affected by CVE-2021-1494?

CVE-2021-1494 affects multiple Cisco products that utilize the Snort detection engine, particularly on specific Debian versions.

Can CVE-2021-1494 be exploited remotely?

Yes, CVE-2021-1494 can be exploited by an unauthenticated remote attacker.

What type of attack does CVE-2021-1494 enable?

CVE-2021-1494 enables attackers to bypass configured file policies for HTTP by exploiting improper handling of HTTP header parameters.

Vulnerability/
CVE-2021-1494

medium

5.8

CWE

693

15/11/2024

18/11/2024

CVE-2021-1494

First published: Fri Nov 15 2024(Updated: )

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured file policy for HTTP packets and deliver a malicious payload.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
debian/snort	<=2.9.7.0-5<=2.9.15.1-5<=2.9.15.1-6	2.9.20-0+deb10u1 2.9.20-0+deb11u1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2021-1494?
CVE-2021-1494 has been assigned a medium severity rating due to its potential to allow unauthorized file policy bypass.
How do I fix CVE-2021-1494?
To fix CVE-2021-1494, update the Snort package to versions 2.9.20-0+deb10u1 or 2.9.20-0+deb11u1 or higher.
What products are affected by CVE-2021-1494?
CVE-2021-1494 affects multiple Cisco products that utilize the Snort detection engine, particularly on specific Debian versions.
Can CVE-2021-1494 be exploited remotely?
Yes, CVE-2021-1494 can be exploited by an unauthenticated remote attacker.
What type of attack does CVE-2021-1494 enable?
CVE-2021-1494 enables attackers to bypass configured file policies for HTTP by exploiting improper handling of HTTP header parameters.

collector/security-tracker-debian
agent/type
agent/softwarecombine
agent/weakness
agent/references
agent/first-publish-date
agent/description
agent/severity
agent/author
agent/event
agent/tags
collector/nvd-api
source/NVD
agent/last-modified-date
collector/mitre-cve
source/MITRE
agent/source
package-manager/debian

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.