CVE-2018-0233
CVSS V2 High 7.8
CVSS V3 High 8.6
Description
A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the detection engine to consume excessive system memory on an affected device, which could cause a denial of service (DoS) condition. The vulnerability is due to the affected software improperly handling changes to SSL connection states. An attacker could exploit this vulnerability by sending crafted SSL connections through an affected device. A successful exploit could allow the attacker to cause the detection engine to consume excessive system memory on the affected device, which could cause a DoS condition. The device may need to be reloaded manually to recover from this condition. This vulnerability affects Cisco Firepower System Software Releases 6.0.0 and later, running on any of the following Cisco products: Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services, Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances, Advanced Malware Protection (AMP) for Networks, 8000 Series Appliances, Firepower 4100 Series Appliances, FirePOWER 7000 Series Appliances, FirePOWER 8000 Series Appliances, Firepower 9300 Series Security Appliances, Firepower Threat Defense for Integrated Services Routers (ISRs), Firepower Threat Defense Virtual for VMware, Industrial Security Appliance 3000, Sourcefire 3D System Appliances. Cisco Bug IDs: CSCve23031.
Overview
- CVE ID
- CVE-2018-0233
- Assigner
- ykramarz@cisco.com
- Vulnerability Status
- Modified
- Published Version
- 2018-04-19T20:29:00
- Last Modified Date
- 2019-10-09T23:31:32
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:cisco:firepower_management_center:5.4.0:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:a:cisco:firepower_management_center:6.0.0:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:a:cisco:firepower_management_center:6.1.0:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:a:cisco:firepower_management_center:6.2.0:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:a:cisco:firepower_management_center:6.2.1:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:L/Au:N/C:N/I:N/A:C
- Access Vector
- NETWORK
- Access Compatibility
- LOW
- Authentication
- NONE
- Confidentiality Impact
- NONE
- Integrity Impact
- NONE
- Availability Impact
- COMPLETE
- Base Score
- 7.8
- Severity
- HIGH
- Exploitability Score
- 10
- Impact Score
- 6.9
CVSS Version 3
- Version
- 3.0
- Vector String
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Attack Vector
- NETWORK
- Attack Compatibility
- LOW
- Privileges Required
- NONE
- User Interaction
- NONE
- Scope
- CHANGED
- Confidentiality Impact
- NONE
- Availability Impact
- HIGH
- Base Score
- 8.6
- Base Severity
- HIGH
- Exploitability Score
- 3.9
- Impact Score
- 4
References
| Reference URL | Reference Tags |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fpsnort | Vendor Advisory |
| http://www.securityfocus.com/bid/103930 | Third Party Advisory VDB Entry |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2018-0233 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0233 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-05-10 17:07:39 | Added to TrackCVE | |||
| 2022-12-03 05:26:37 | psirt@cisco.com | ykramarz@cisco.com | CVE Assigner | updated |
| 2022-12-03 05:26:37 | 2018-04-19T20:29Z | 2018-04-19T20:29:00 | CVE Published Date | updated |
| 2022-12-03 05:26:37 | 2019-10-09T23:31:32 | CVE Modified Date | updated | |
| 2022-12-03 05:26:37 | Modified | Vulnerability Status | updated |