Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities
At a glance
Severity
MEDIUM 5.8
EPSS
EPSS 0.53 % · percentile 44 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
cisco
NVD status
Awaiting Analysis
Description
Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete error checking when Snort 3 parses UDP Netflow Protocol packets. An attacker could exploit this vulnerability by sending a single crafted Netflow packet through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
