Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability (Cisco Cisco Cyber Vision)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.48 % · percentile 42 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Analyzed
Description
Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when parsing the Multicast DNS fields of the HTTP header. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine unexpectedly restarts.
Weaknesses (CWE)
- CWE-787 — Out-of-bounds Write
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L | cisco |
| CVSS 3.1 | MEDIUM 5.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L | NVD · psirt@cisco.com (Secondary) |
European references
- ENISA EUVD · EUVD-2026-9466
- GCVE · GCVE-0-2026-20067
Affected configurations (NVD CPE)
cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*≥ 3.0.0-233 < 3.9.5.0cpe:2.3:a:cisco:cyber_vision:3.0.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.0.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.0.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.0.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.0.4:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.0.5:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.0.6:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.1.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.1.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.1.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.2.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.2.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.2.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.2.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:3.2.4:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.0.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.0.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.0.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.0.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.1.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.1.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.1.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.1.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.1.4:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.1.5:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.1.6:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.1.7:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.2.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.2.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.2.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.2.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.2.4:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.2.6:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.3.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.3.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.3.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.3.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.4.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:cyber_vision:4.4.1:*:*:*:*:*:*:*- +142 more
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco Cyber Vision | affected 3.0.0 ; affected 3.0.2 ; affected 3.0.3 ; affected 3.0.1 ; affected 3.1.0 ; affected 3.0.4 |
| Cisco · Cisco Secure Firewall Threat Defense (FTD) Software | affected 7.0.0 ; affected 7.0.0.1 ; affected 7.0.1 ; affected 7.1.0 ; affected 7.0.1.1 ; affected 7.1.0.1 |
| Cisco · Cisco UTD SNORT IPS Engine Software | affected 17.3.1a ; affected 17.2.1r ; affected 17.3.2 ; affected 17.4.1a ; affected 17.5.1 ; affected 17.3.3 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |