Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-40114
HistoryOct 27, 2021 - 12:00 a.m.

CVE-2021-40114

2021-10-2700:00:00
ubuntu.com
ubuntu.com
5
cisco products
vulnerability
snort detection engine
icmp traffic
denial of service
memory resource management
exploit
exhaust resources
device reload

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0.004

Percentile

74.1%

Multiple Cisco products are affected by a vulnerability in the way the
Snort detection engine processes ICMP traffic that could allow an
unauthenticated, remote attacker to cause a denial of service (DoS)
condition on an affected device. The vulnerability is due to improper
memory resource management while the Snort detection engine is processing
ICMP packets. An attacker could exploit this vulnerability by sending a
series of ICMP packets through an affected device. A successful exploit
could allow the attacker to exhaust resources on the affected device,
causing the device to reload.

Notes

Author Note
yomonokio There is no access to the actual fix for this CVE nor workarounds that address this vulnerability

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0.004

Percentile

74.1%