CVE-2017-3885 — Uncontrolled Resource Consumption in Cisco Secure Firewall Management Center

CWE-400 — Uncontrolled Resource ConsumptionCWE-3994 documents4 sources
Severity
5.9MEDIUMNVD
EPSS
0.5%
top 36.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Secure Firewall Management Center
Timeline
PublishedApr 7
Latest updateMay 13

Description

A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process consumes a high level of CPU resources. Affected Products: This vulnerability affects Cisco Firepower System Software running software releases 6.0.0, 6.1.0, 6.2.0, or 6.2.1 when the device is configured with an SSL policy that has at least one rule specif…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-96h7-mg93-6889: A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenti↗2022-05-13
▶
CVEList
CVE-2017-3885: A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenti↗2017-04-07
▶

📋Vendor Advisories

1
Cisco
Cisco Firepower Detection Engine SSL Denial of Service Vulnerability↗2017-04-05
▶
CVE-2017-3885 — Uncontrolled Resource Consumption | cvebase