cisco firepower_threat_defense 跨界内存写

admin

0
文章

0
评论

2023-11-30 05:08:44 Ali_nvd 来源：ZONE.CI 全球网 0 阅读模式

cisco firepower_threat_defense 跨界内存写

CVE编号

CVE-2022-20946

利用情况

暂无

补丁情况

N/A

披露时间

2022-11-16

漏洞描述

A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory handling error that occurs when GRE traffic is processed. An attacker could exploit this vulnerability by sending a crafted GRE payload through an affected device. A successful exploit could allow the attacker to cause the device to restart, resulting in a DoS condition. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-gre-dos-hmedHQPM ["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-gre-dos-hmedHQPM"] This advisory is part of the November 2022 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s...

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	cisco	firepower_threat_defense	*	From (including) 6.3.0	Up to (including) 6.3.0.5
	运行在以下环境
	应用	cisco	firepower_threat_defense	*	From (including) 6.4.0	Up to (including) 6.4.0.15
	运行在以下环境
	应用	cisco	firepower_threat_defense	*	From (including) 6.5.0	Up to (including) 6.5.0.5
	运行在以下环境
	应用	cisco	firepower_threat_defense	*	From (including) 6.6.0	Up to (including) 6.6.5.2
	运行在以下环境
	应用	cisco	firepower_threat_defense	*	From (including) 6.7.0	Up to (including) 6.7.0.3
	运行在以下环境
	应用	cisco	firepower_threat_defense	*	From (including) 7.0.0	Up to (including) 7.0.3
	运行在以下环境
	应用	cisco	firepower_threat_defense	7.1.0.0	-
	运行在以下环境
	应用	cisco	firepower_threat_defense	7.1.0.1	-
	运行在以下环境
	应用	cisco	firepower_threat_defense	7.1.0.2	-