Vigie VulnDBEuropean-hosted Vulnerability DB

CVE-2026-20019

Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities

En bref

Sévérité
MEDIUM 5.8
EPSS
EPSS 0.53 % · centile 44 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
cisco
Statut NVD
Awaiting Analysis

Description

Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 parses UDP Netflow Protocol packets. An attacker could exploit this vulnerability by sending a single crafted Netflow packet through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lcisco
CVSS 3.1MEDIUM 5.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:LNVD · psirt@cisco.com (Secondary)

Faiblesses (CWE)

Références européennes

Produits affectés

ProduitVersions
Cisco · Cisco Open Source Snort3affected 3.12.2.0 ; affected 3.1.2.0 ; affected 3.1.3.0 ; affected 3.1.4.0 ; affected 3.1.5.0 ; affected 3.1.6.0
Cisco · Cisco Secure Firewall Threat Defense (FTD) Softwareaffected 7.0.0 ; affected 7.0.0.1 ; affected 7.0.1 ; affected 7.0.1.1 ; affected 7.0.2 ; affected 7.2.0
Cisco · Cisco UTD SNORT IPS Engine Softwareaffected 17.12.1a ; affected 17.12.2 ; affected 17.13.1a ; affected 17.12.3 ; affected 17.14.1a ; affected 17.12.4

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD