cisco-sa-ftd-dos-N2vQZASR: Cisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability
First published: Wed May 06 2020(Updated: )
A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to inefficient memory management. An attacker could exploit this vulnerability by sending a high rate of IPv4 or IPv6 traffic through an affected device. This traffic would need to match a configured block action in an access control policy. An exploit could allow the attacker to cause a memory exhaustion condition on the affected device, which would result in a DoS for traffic transiting the device, as well as sluggish performance of the management interface. Once the flood is stopped, performance should return to previous states. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-N2vQZASR This advisory is part of the May 2020 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication, which includes 12 Cisco Security Advisories that describe 12 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: May 2020 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FTD Software | =6.3.0<6.3.0.6 (future release)Cisco_FTD_Hotfix_AO-6.3.0.6-2.sh.REL.tarCisco_FTD_SSP_FP2K_Hotfix_ AO-6.3.0.6-2.sh.REL.tarCisco_FTD_SSP_Hotfix_ AO-6.3.0.6-2.sh.REL.tar>=Earlier than 6.1.0=6.1.0=6.2.0=6.2.1=6.2.2<=6.2.3<6.2.3.16 (June 2020)Cisco_FTD_Hotfix_DT-6.2.3.16-3.sh.REL.tarCisco_FTD_SSP_FP2K_Hotfix_DT-6.2.3.16-3.sh.REL.tarCisco_FTD_SSP_Hotfix_DT-6.2.3.16-3.sh.REL.tar | 6.3.0.6 (future release)Cisco_FTD_Hotfix_AO-6.3.0.6-2.sh.REL.tarCisco_FTD_SSP_FP2K_Hotfix_ AO-6.3.0.6-2.sh.REL.tarCisco_FTD_SSP_Hotfix_ AO-6.3.0.6-2.sh.REL.tar 6.2.3.16 (June 2020)Cisco_FTD_Hotfix_DT-6.2.3.16-3.sh.REL.tarCisco_FTD_SSP_FP2K_Hotfix_DT-6.2.3.16-3.sh.REL.tarCisco_FTD_SSP_Hotfix_DT-6.2.3.16-3.sh.REL.tar |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/title
- agent/weakness
- agent/severity
- agent/references
- agent/tags
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco ftd software
- version/cisco ftd software/6.3.0
- version/cisco ftd software/earlier than 6.1.0
- version/cisco ftd software/6.1.0
- version/cisco ftd software/6.2.0
- version/cisco ftd software/6.2.1
- version/cisco ftd software/6.2.2
- version/cisco ftd software/6.2.3