Cisco Snort++ Protocol Decoder Multiple Denial of Service Vulnerabilities

Bugtraq ID:	98465
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-6657 CVE-2017-6658
Remote:	Yes
Local:	No
Published:	May 15 2017 12:00AM
Updated:	May 15 2017 12:00AM
Credit:	Bhargava Shastry
Vulnerable:	Cisco Snort++ 0
Not Vulnerable:	Cisco Snort++ BUILD_233

Cisco Snort++ Protocol Decoder Multiple Denial of Service Vulnerabilities

Cisco Snort++ is prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to restart the affected process, denying service to legitimate users.

These issues fixed in:

Cisco Snort++ BUILD_233.

Cisco Snort++ Protocol Decoder Multiple Denial of Service Vulnerabilities

To exploit these issues attackers can use readily available tools.

Cisco Snort++ Protocol Decoder Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Snort++ Protocol Decoder Multiple Denial of Service Vulnerabilities

References:

• Build 233 (Cisco)
  
• Cisco Homepage (Cisco)
  
• The Official Blog of the World Leading Open-Source IDS/IPS Snort. (Cisco)
  
• cisco-sa-20170515-snort: Cisco Snort++ Protocol Decoder Denial of Service Vulne (Cisco)