BDU:2026-01755

Опубликовано: 07 янв. 2026

Источник: fstec

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Уязвимость механизма обнаружения Snort программного межсетевого экрана Cisco Secure Firewall Threat Defense (FTD) связана с ошибкой повторного освобождения памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Вендор

Cisco Systems Inc.

Наименование ПО

Snort

Cisco Secure Firewall Threat Defense (FTD)

Версия ПО

3 (Snort)

7.0.0 (Cisco Secure Firewall Threat Defense (FTD))

7.0.0.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.1.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.2 (Cisco Secure Firewall Threat Defense (FTD))

7.0.2.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.3 (Cisco Secure Firewall Threat Defense (FTD))

7.0.4 (Cisco Secure Firewall Threat Defense (FTD))

7.0.5 (Cisco Secure Firewall Threat Defense (FTD))

7.0.6 (Cisco Secure Firewall Threat Defense (FTD))

7.0.6.1 (Cisco Secure Firewall Threat Defense (FTD))

7.0.6.2 (Cisco Secure Firewall Threat Defense (FTD))

7.0.6.3 (Cisco Secure Firewall Threat Defense (FTD))

7.0.7 (Cisco Secure Firewall Threat Defense (FTD))

7.0.8 (Cisco Secure Firewall Threat Defense (FTD))

7.0.8.1 (Cisco Secure Firewall Threat Defense (FTD))

7.1.0 (Cisco Secure Firewall Threat Defense (FTD))

7.1.0.1 (Cisco Secure Firewall Threat Defense (FTD))

7.1.0.2 (Cisco Secure Firewall Threat Defense (FTD))

7.1.0.3 (Cisco Secure Firewall Threat Defense (FTD))

7.2.0 (Cisco Secure Firewall Threat Defense (FTD))

7.2.0.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.2 (Cisco Secure Firewall Threat Defense (FTD))

7.2.3 (Cisco Secure Firewall Threat Defense (FTD))

7.2.4 (Cisco Secure Firewall Threat Defense (FTD))

7.2.4.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.5 (Cisco Secure Firewall Threat Defense (FTD))

7.2.5.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.6 (Cisco Secure Firewall Threat Defense (FTD))

7.2.7 (Cisco Secure Firewall Threat Defense (FTD))

7.2.5.2 (Cisco Secure Firewall Threat Defense (FTD))

7.2.8 (Cisco Secure Firewall Threat Defense (FTD))

7.2.8.1 (Cisco Secure Firewall Threat Defense (FTD))

7.2.9 (Cisco Secure Firewall Threat Defense (FTD))

7.2.10 (Cisco Secure Firewall Threat Defense (FTD))

7.2.10.2 (Cisco Secure Firewall Threat Defense (FTD))

7.3.0 (Cisco Secure Firewall Threat Defense (FTD))

7.3.1 (Cisco Secure Firewall Threat Defense (FTD))

7.3.1.1 (Cisco Secure Firewall Threat Defense (FTD))

7.3.1.2 (Cisco Secure Firewall Threat Defense (FTD))

7.4.0 (Cisco Secure Firewall Threat Defense (FTD))

7.4.1 (Cisco Secure Firewall Threat Defense (FTD))

7.4.1.1 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2.1 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2.2 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2.3 (Cisco Secure Firewall Threat Defense (FTD))

7.4.2.4 (Cisco Secure Firewall Threat Defense (FTD))

7.4.3 (Cisco Secure Firewall Threat Defense (FTD))

7.6.0 (Cisco Secure Firewall Threat Defense (FTD))

7.6.1 (Cisco Secure Firewall Threat Defense (FTD))

7.6.2 (Cisco Secure Firewall Threat Defense (FTD))

7.6.2.1 (Cisco Secure Firewall Threat Defense (FTD))

7.7.0 (Cisco Secure Firewall Threat Defense (FTD))

7.7.10 (Cisco Secure Firewall Threat Defense (FTD))

7.7.10.1 (Cisco Secure Firewall Threat Defense (FTD))

Тип ПО

Программное средство защиты

Средство защиты

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Критический уровень опасности (базовая оценка CVSS 2.0 составляет 10)

Критический уровень опасности (базовая оценка CVSS 3.1 составляет 9,8)

Возможные меры по устранению уязвимости

Использование рекомендаций производителя:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 48%

0.00645

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Связанные уязвимости

CVE-2026-20026

CVSS3: 5.8

nvd

7 месяцев назад

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer use-after-free read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to unexpectedly restart the Snort 3 Detection Engine, which could cause a denial of service (DoS).

GHSA-xc37-chcm-mxpf