CVE-2021-1494: Medium severity debian/snort vulnerability
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured file policy for HTTP packets and deliver a malicious payload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1494?
CVE-2021-1494 has been assigned a medium severity rating due to its potential to allow unauthorized file policy bypass.
How do I fix CVE-2021-1494?
To fix CVE-2021-1494, update the Snort package to versions 2.9.20-0+deb10u1 or 2.9.20-0+deb11u1 or higher.
What products are affected by CVE-2021-1494?
CVE-2021-1494 affects multiple Cisco products that utilize the Snort detection engine, particularly on specific Debian versions.
Can CVE-2021-1494 be exploited remotely?
Yes, CVE-2021-1494 can be exploited by an unauthenticated remote attacker.
What type of attack does CVE-2021-1494 enable?
CVE-2021-1494 enables attackers to bypass configured file policies for HTTP by exploiting improper handling of HTTP header parameters.