cisco-sa-ftd-vdb-snort-djj4cnbR: Cisco Firepower Threat Defense Software Vulnerability Database with Snort Detection Engine Security Policy Bypass and Denial of Service Issue
First published: Wed Oct 23 2024(Updated: )
An issue with a Cisco Vulnerability Database (VDB) release for Cisco Firepower Threat Defense (FTD) Software could cause the Snort detection engine to restart unexpectedly when inspecting traffic. While the Snort detection engine is restarting, traffic could bypass Snort inspection or be dropped, depending on the device configuration. For more information, see the Details section of this advisory.The Snort 2 and Snort 3 detection engines are both affected. The Snort detection engine will restart automatically. No manual intervention is required.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-vdb-snort-djj4cnbRThis advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Threat Defense | ||
| Snort |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-ftd-vdb-snort-djj4cnbR?
The severity of cisco-sa-ftd-vdb-snort-djj4cnbR is critical due to the potential for bypassing traffic inspection.
How do I fix cisco-sa-ftd-vdb-snort-djj4cnbR?
To fix cisco-sa-ftd-vdb-snort-djj4cnbR, users should apply the latest patches provided by Cisco for their affected Firepower Threat Defense Software.
What products are affected by cisco-sa-ftd-vdb-snort-djj4cnbR?
cisco-sa-ftd-vdb-snort-djj4cnbR affects Cisco Firepower Threat Defense and Cisco Snort.
What impact does cisco-sa-ftd-vdb-snort-djj4cnbR have on network security?
cisco-sa-ftd-vdb-snort-djj4cnbR may allow malicious traffic to bypass detection, compromising network security.
Is there a workaround for cisco-sa-ftd-vdb-snort-djj4cnbR until a fix is applied?
Cisco recommends monitoring traffic closely, but no specific workaround is provided for cisco-sa-ftd-vdb-snort-djj4cnbR.
- agent/title
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/event
- agent/type
- agent/first-publish-date
- collector/cisco-recent
- source/Cisco
- agent/severity
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco firepower threat defense
- canonical/snort