CVE-2023-20177

Summary

CVE	CVE-2023-20177
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-11-01 17:15:00 UTC
Updated	2024-01-25 17:15:00 UTC
Description	A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detection engine could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability exists because a logic error occurs when a Snort 3 detection engine inspects an SSL/TLS connection that has either a URL Category configured on the SSL file policy or a URL Category configured on an access control policy with TLS server identity discovery enabled. Under specific, time-based constraints, an attacker could exploit this vulnerability by sending a crafted SSL/TLS connection through an affected device. A successful exploit could allow the attacker to trigger an unexpected reload of the Snort 3 detection engine, resulting in either a bypass or denial of service (DoS) condition, depending on device configuration. The Snort 3 detection engine will restart automatically. No manual intervention is required.

Problem Types: NVD-CWE-noinfo

Type	Vendor	Product	Version	Update	Edition	Language
Application	Cisco	Firepower Threat Defense	7.0.0	All	All	All
Application	Cisco	Firepower Threat Defense	7.0.0.1	All	All	All
Application	Cisco	Firepower Threat Defense	7.0.1	All	All	All
Application	Cisco	Firepower Threat Defense	7.0.1.1	All	All	All
Application	Cisco	Firepower Threat Defense	7.0.2	All	All	All
Application	Cisco	Firepower Threat Defense	7.0.2.1	All	All	All
Application	Cisco	Firepower Threat Defense	7.0.3	All	All	All
Application	Cisco	Firepower Threat Defense	7.0.4	All	All	All
Application	Cisco	Firepower Threat Defense	7.0.5	All	All	All
Application	Cisco	Firepower Threat Defense	7.1.0	All	All	All
Application	Cisco	Firepower Threat Defense	7.1.0.1	All	All	All
Application	Cisco	Firepower Threat Defense	7.1.0.2	All	All	All
Application	Cisco	Firepower Threat Defense	7.1.0.3	All	All	All
Application	Cisco	Firepower Threat Defense	7.2.0	All	All	All
Application	Cisco	Firepower Threat Defense	7.2.0.1	All	All	All
Application	Cisco	Firepower Threat Defense	7.2.1	All	All	All
Application	Cisco	Firepower Threat Defense	7.2.2	All	All	All
Application	Cisco	Firepower Threat Defense	7.2.3	All	All	All
Application	Cisco	Firepower Threat Defense	7.3.0	All	All	All
Application	Cisco	Firepower Threat Defense	7.3.1	All	All	All
Application	Cisco	Firepower Threat Defense	7.3.1.1	All	All	All

Reference	Source	Link	Tags
Cisco Firepower Threat Defense Software SSL/TLS URL Category and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability	MISC	sec.cloudapps.cisco.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

317392 Cisco Firepower Threat Defense (FTD) Software SSL/Transport Layer Security (TLS) Uniform Resource Locator (URL) Category and Snort 3 Detection Engine Bypass and Denial of Service (DoS) Vulnerability (cisco-sa-sa-ftd-snort3-urldos-OccFQTeX)