多款Cisco产品Firepower System Software detection引擎安全漏洞

CNNVD-ID编号	CNNVD-201804-1106	CVE编号	CVE-2018-0233
发布时间	2018-04-19	更新时间	2020-05-19
漏洞类型	资源管理错误	漏洞来源	N/A
危险等级	高危	威胁类型	远程
厂商	cisco

漏洞介绍

Cisco Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services等都是美国思科（Cisco）公司的安全防火墙设备。Firepower System Software是其中的一套防火墙操作系统。detection engine是其中的一个入侵检测引擎。

多款Cisco产品中的Firepower System Software 6.0.0及之后的版本中detection引擎的安全套接层协议数据包重组功能存在安全漏洞，该漏洞源于程序没有正确的处理SSL连接状态的改变。远程攻击者可利用该漏洞造成拒绝服务（系统内存消耗过多）。以下产品受到影响：Cisco Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services；Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls；Advanced Malware Protection (AMP) for Networks；7000 Series Appliances；Advanced Malware Protection (AMP) for Networks；8000 Series Appliances；Firepower 4100 Series Appliances；FirePOWER 7000 Series Appliances；FirePOWER 8000 Series Appliances；Firepower 9300 Series Security Appliances；Firepower Threat Defense for Integrated Services Routers (ISRs)；Firepower Threat Defense Virtual for VMware；Industrial Security Appliance 3000；Sourcefire 3D System Appliances。

漏洞补丁

目前厂商已发布升级了多款Cisco产品Firepower System Software detection引擎安全漏洞的补丁，多款Cisco产品Firepower System Software detection引擎安全漏洞的补丁获取链接：

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fpsnort

参考网址

来源:BID

链接：https://www.securityfocus.com/bid/103930

来源:CONFIRM

链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fpsnort

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2018.1206.2/

来源:tools.cisco.com

链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fpsnort

受影响实体

Cisco Firepower_management_center:6.2.1 Cisco Firepower_management_center:6.2.0 Cisco Firepower_management_center:6.1.0 Cisco Firepower_management_center:6.0.0 Cisco Firepower_management_center:5.4.0