Cisco Snort DCERPC Stub Data Out of Bounds Read

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer out-of-bounds read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to obtain sensitive information in the Snort 3 data stream.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

信息暴露

Cisco Secure Firewall Threat Defense和Cisco UTD SNORT IPS Engine Software 信息泄露漏洞

Cisco Secure Firewall Threat Defense和Cisco UTD SNORT IPS Engine Software都是美国思科（Cisco）公司的产品。Cisco Secure Firewall Threat Defense是一个集成式防火墙平台。Cisco UTD SNORT IPS Engine Software是一个入侵检测与防御引擎。 Cisco Secure Firewall Threat Defense和Cisco UTD SNORT IPS Engine Sof

N/A

N/A