Lucene search

CiscoCVE-2016-6439

HistoryOct 27, 2016 - 9:59 p.m.

CVE-2016-6439

2016-10-2721:59:11

CWE-399

cisco

web.nvd.nist.gov

cve-2016-6439

cisco

firepower system software

dos

http

vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.003

Percentile

68.4%

JSON

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper handling of an HTTP packet stream. An attacker could exploit this vulnerability by sending a crafted HTTP packet stream to the detection engine on the targeted device. An exploit could allow the attacker to cause a DoS condition if the Snort process restarts and traffic inspection is bypassed or traffic is dropped.

Affected configurations

Nvd

Node

ciscofirepower_management_centerMatch5.3.0

ciscofirepower_management_centerMatch5.3.0.2

ciscofirepower_management_centerMatch5.3.0.3

ciscofirepower_management_centerMatch5.3.0.4

ciscofirepower_management_centerMatch5.3.1

ciscofirepower_management_centerMatch5.3.1.3

ciscofirepower_management_centerMatch5.3.1.4

ciscofirepower_management_centerMatch5.3.1.5

ciscofirepower_management_centerMatch5.3.1.6

ciscofirepower_management_centerMatch5.4.0

ciscofirepower_management_centerMatch5.4.0.2

ciscofirepower_management_centerMatch5.4.1

ciscofirepower_management_centerMatch5.4.1.1

ciscofirepower_management_centerMatch5.4.1.2

ciscofirepower_management_centerMatch5.4.1.3

ciscofirepower_management_centerMatch5.4.1.4

ciscofirepower_management_centerMatch5.4.1.5

ciscofirepower_management_centerMatch5.4.1.6

ciscofirepower_management_centerMatch5.4_base

ciscofirepower_management_centerMatch6.0.0

ciscofirepower_management_centerMatch6.0.0.0

ciscofirepower_management_centerMatch6.0.0.1

ciscofirepower_management_centerMatch6.0.1

ciscofirepower_management_centerMatch6.0_base

VendorProductVersionCPE
ciscofirepower_management_center5.3.0cpe:2.3:a:cisco:firepower_management_center:5.3.0:*:*:*:*:*:*:*
ciscofirepower_management_center5.3.0.2cpe:2.3:a:cisco:firepower_management_center:5.3.0.2:*:*:*:*:*:*:*
ciscofirepower_management_center5.3.0.3cpe:2.3:a:cisco:firepower_management_center:5.3.0.3:*:*:*:*:*:*:*
ciscofirepower_management_center5.3.0.4cpe:2.3:a:cisco:firepower_management_center:5.3.0.4:*:*:*:*:*:*:*
ciscofirepower_management_center5.3.1cpe:2.3:a:cisco:firepower_management_center:5.3.1:*:*:*:*:*:*:*
ciscofirepower_management_center5.3.1.3cpe:2.3:a:cisco:firepower_management_center:5.3.1.3:*:*:*:*:*:*:*
ciscofirepower_management_center5.3.1.4cpe:2.3:a:cisco:firepower_management_center:5.3.1.4:*:*:*:*:*:*:*
ciscofirepower_management_center5.3.1.5cpe:2.3:a:cisco:firepower_management_center:5.3.1.5:*:*:*:*:*:*:*
ciscofirepower_management_center5.3.1.6cpe:2.3:a:cisco:firepower_management_center:5.3.1.6:*:*:*:*:*:*:*
ciscofirepower_management_center5.4.0cpe:2.3:a:cisco:firepower_management_center:5.4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	firepower_management_center	5.3.0	cpe:2.3:a:cisco:firepower_management_center:5.3.0:::::::*
cisco	firepower_management_center	5.3.0.2	cpe:2.3:a:cisco:firepower_management_center:5.3.0.2:::::::*
cisco	firepower_management_center	5.3.0.3	cpe:2.3:a:cisco:firepower_management_center:5.3.0.3:::::::*
cisco	firepower_management_center	5.3.0.4	cpe:2.3:a:cisco:firepower_management_center:5.3.0.4:::::::*
cisco	firepower_management_center	5.3.1	cpe:2.3:a:cisco:firepower_management_center:5.3.1:::::::*
cisco	firepower_management_center	5.3.1.3	cpe:2.3:a:cisco:firepower_management_center:5.3.1.3:::::::*
cisco	firepower_management_center	5.3.1.4	cpe:2.3:a:cisco:firepower_management_center:5.3.1.4:::::::*
cisco	firepower_management_center	5.3.1.5	cpe:2.3:a:cisco:firepower_management_center:5.3.1.5:::::::*
cisco	firepower_management_center	5.3.1.6	cpe:2.3:a:cisco:firepower_management_center:5.3.1.6:::::::*
cisco	firepower_management_center	5.4.0	cpe:2.3:a:cisco:firepower_management_center:5.4.0:::::::*

Rows per page:

1-10 of 241

CNA Affected

[
  {
    "product": "Cisco Firepower System Software before 6.0.1",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Firepower System Software before 6.0.1"
      }
    ]
  }
]

References

www.securityfocus.com/bid/93787

www.securitytracker.com/id/1037061

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-fpsnort

Social References

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.003

Percentile

68.4%

JSON

Related for CVE-2016-6439