CVE-2019-1691
MediumCVSS 5.8Exploitation Probability (EPSS)
High risk81th percentile - higher than 81% of all known CVEs
Summary
A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the SNORT detection engine, resulting in a denial of service (DoS) condition. The issue is due to incomplete error handling of SSL/TLS packet headers during connection establishment. An attacker could send a crafted SSL/TLS packet during the handshake, causing the engine to restart and leading to partial DoS.
Risk Assessment
The risk is that an attacker can disrupt the detection engine, potentially causing temporary loss of protection.
Recommendation
It is recommended to upgrade to version 6.2.3.4 or later, which includes the fix.
Original NVD description (English source)
A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service (DoS) condition. The vulnerability is due to the incomplete error handling of the SSL or TLS packet header during the connection establishment. An attacker could exploit this vulnerability by sending a crafted SSL or TLS packet during the connection handshake. An exploit could allow the attacker to cause the SNORT detection engine to unexpectedly restart, resulting in a partial DoS condition while the detection engine restarts. Versions prior to 6.2.3.4 are affected.