SecuritySpace - CVE-2017-3885

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-3885

Description: A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process consumes a high level of CPU resources. Affected Products: This vulnerability affects Cisco Firepower System Software running software releases 6.0.0, 6.1.0, 6.2.0, or 6.2.1 when the device is configured with an SSL policy that has at least one rule specifying traffic decryption. More Information: CSCvc58563. Known Affected Releases: 6.0.0 6.1.0 6.2.0 6.2.1.

Test IDs: 1.3.6.1.4.1.25623.1.0.106719

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-3885
BugTraq ID: 97451
http://www.securityfocus.com/bid/97451

CVE ID:	CVE-2017-3885
Description:	A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process consumes a high level of CPU resources. Affected Products: This vulnerability affects Cisco Firepower System Software running software releases 6.0.0, 6.1.0, 6.2.0, or 6.2.1 when the device is configured with an SSL policy that has at least one rule specifying traffic decryption. More Information: CSCvc58563. Known Affected Releases: 6.0.0 6.1.0 6.2.0 6.2.1.
Test IDs:	1.3.6.1.4.1.25623.1.0.106719
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3885 BugTraq ID: 97451 http://www.securityfocus.com/bid/97451