Description
Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer out-of-bounds read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to obtain sensitive information in the Snort 3 data stream.
Metrics
CVSS 3.1 5.3/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; 7.0.2; 7.2.0; 7.0.2.1; 7.0.3; 7.1.0.2; 7.2.0.1; 7.0.4; 7.2.1; 7.0.5; 7.3.0; 7.2.2; 7.2.3; 7.3.1; 7.1.0.3 |
| Cisco | Cisco UTD SNORT IPS Engine Software | 3.17.1S; 16.12.3; Fuji-16.9.5; 16.12.4; 17.3.1a; 16.6.6; 16.12.2; Fuji-16.9.6; 3.17.0S; Fuji-16.9.3; Denali-16.3.7; Fuji-16.9.2; Fuji-16.9.4; Everest-16.6.4; Everest-16.6.3; 16.6.5; Denali-16.3.5; 17.2.1r; 17.1.1; Everest-16.6.2 |
References
Timeline
- Published
- Jan 7, 2026
- Last modified
- Oct 26, 2026
- NVD status
- Deferred