Sign-up

ID

VAR-201804-1014


CVE

CVE-2018-0233


TITLE

Cisco Firepower System Software Vulnerabilities related to resource exhaustion

Trust: 0.8

sources: JVNDB: JVNDB-2018-004421

DESCRIPTION

A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the detection engine to consume excessive system memory on an affected device, which could cause a denial of service (DoS) condition. The vulnerability is due to the affected software improperly handling changes to SSL connection states. An attacker could exploit this vulnerability by sending crafted SSL connections through an affected device. A successful exploit could allow the attacker to cause the detection engine to consume excessive system memory on the affected device, which could cause a DoS condition. The device may need to be reloaded manually to recover from this condition. This vulnerability affects Cisco Firepower System Software Releases 6.0.0 and later, running on any of the following Cisco products: Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services, Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances, Advanced Malware Protection (AMP) for Networks, 8000 Series Appliances, Firepower 4100 Series Appliances, FirePOWER 7000 Series Appliances, FirePOWER 8000 Series Appliances, Firepower 9300 Series Security Appliances, Firepower Threat Defense for Integrated Services Routers (ISRs), Firepower Threat Defense Virtual for VMware, Industrial Security Appliance 3000, Sourcefire 3D System Appliances. Cisco Bug IDs: CSCve23031. Cisco Firepower System Software Contains a resource exhaustion vulnerability. Vendors report this vulnerability Bug ID CSCve23031 Published as.Denial of service (DoS) May be in a state. are security firewall devices of Cisco (Cisco). Firepower System Software is one of the firewall operating systems. The detection engine is one of the intrusion detection engines

Trust: 1.98

sources: NVD: CVE-2018-0233 // JVNDB: JVNDB-2018-004421 // BID: 103930 // VULHUB: VHN-118435

AFFECTED PRODUCTS

vendor:ciscomodel:secure firewall management centerscope:eqversion:6.1.0

Trust: 1.0

vendor:ciscomodel:secure firewall management centerscope:eqversion:6.2.1

Trust: 1.0

vendor:ciscomodel:secure firewall management centerscope:eqversion:6.2.0

Trust: 1.0

vendor:ciscomodel:secure firewall management centerscope:eqversion:6.0.0

Trust: 1.0

vendor:ciscomodel:secure firewall management centerscope:eqversion:5.4.0

Trust: 1.0

vendor:ciscomodel:firepower management centerscope: - version: -

Trust: 0.8

vendor:ciscomodel:firepower management centerscope:eqversion:5.4.0

Trust: 0.6

vendor:ciscomodel:firepower management centerscope:eqversion:6.2.0

Trust: 0.6

vendor:ciscomodel:firepower management centerscope:eqversion:6.0.0

Trust: 0.6

vendor:ciscomodel:firepower management centerscope:eqversion:6.1.0

Trust: 0.6

vendor:ciscomodel:firepower management centerscope:eqversion:6.2.1

Trust: 0.6

vendor:ciscomodel:sourcefire 3d system appliancesscope:eqversion:0

Trust: 0.3

vendor:ciscomodel:industrial security appliancescope:eqversion:30000

Trust: 0.3

vendor:ciscomodel:firepower threat defense for integrated services routersscope:eqversion:0

Trust: 0.3

vendor:ciscomodel:firepower system softwarescope:eqversion:0

Trust: 0.3

vendor:ciscomodel:firepower management centerscope:eqversion:6.2

Trust: 0.3

vendor:ciscomodel:firepower management centerscope:eqversion:6.1

Trust: 0.3

vendor:ciscomodel:firepower management centerscope:eqversion:6.0

Trust: 0.3

vendor:ciscomodel:firepower management centerscope:eqversion:5.4

Trust: 0.3

vendor:ciscomodel:firepower seriesscope:eqversion:80000

Trust: 0.3

vendor:ciscomodel:firepower seriesscope:eqversion:70000

Trust: 0.3

vendor:ciscomodel:asa for firepower seriesscope:eqversion:93000

Trust: 0.3

vendor:ciscomodel:asa for firepower seriesscope:eqversion:41000

Trust: 0.3

vendor:ciscomodel:advanced malware protectionscope:eqversion:0

Trust: 0.3

vendor:ciscomodel:adaptive security appliance series next-generationscope:eqversion:5500-x0

Trust: 0.3

vendor:ciscomodel:adaptive security appliance seriesscope:eqversion:5500-x0

Trust: 0.3

vendor:ciscomodel:firepower management centerscope:neversion:6.2.0.3

Trust: 0.3

vendor:ciscomodel:firepower management centerscope:neversion:6.1.0.6

Trust: 0.3

sources: BID: 103930 // JVNDB: JVNDB-2018-004421 // CNNVD: CNNVD-201804-1106 // NVD: CVE-2018-0233

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-0233
value: HIGH

Trust: 1.0

NVD: CVE-2018-0233
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201804-1106
value: HIGH

Trust: 0.6

VULHUB: VHN-118435
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2018-0233
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-118435
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-0233
baseSeverity: HIGH
baseScore: 8.6
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 4.0
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-118435 // JVNDB: JVNDB-2018-004421 // CNNVD: CNNVD-201804-1106 // NVD: CVE-2018-0233

PROBLEMTYPE DATA

problemtype:CWE-400

Trust: 1.9

sources: VULHUB: VHN-118435 // JVNDB: JVNDB-2018-004421 // NVD: CVE-2018-0233

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201804-1106

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201804-1106

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-004421

PATCH
title:cisco-sa-20180418-fpsnorturl:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fpsnort
Trust: 0.8
title:Multiple Cisco product Firepower System Software detection Repair measures for engine security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=81401
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2018-004421 // 
            
            
            
            CNNVD: CNNVD-201804-1106

EXTERNAL IDS
db:NVDid:CVE-2018-0233
Trust: 2.8
db:BIDid:103930
Trust: 2.0
db:JVNDBid:JVNDB-2018-004421
Trust: 0.8
db:CNNVDid:CNNVD-201804-1106
Trust: 0.7
db:AUSCERTid:ESB-2018.1206.2
Trust: 0.6
db:AUSCERTid:ESB-2018.1206.3
Trust: 0.6
db:VULHUBid:VHN-118435
Trust: 0.1
sources:
            
            
            VULHUB: VHN-118435 // 
            
            
            
            BID: 103930 // 
            
            
            
            JVNDB: JVNDB-2018-004421 // 
            
            
            
            CNNVD: CNNVD-201804-1106 // 
            
            
            
            NVD: CVE-2018-0233

REFERENCES
url:https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180418-fpsnort
Trust: 2.6
url:http://www.securityfocus.com/bid/103930
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-0233
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-0233
Trust: 0.8
url:https://www.auscert.org.au/bulletins/esb-2018.1206.2/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2018.1206.3/
Trust: 0.6
url:http://www.cisco.com/
Trust: 0.3
sources:
            
            
            VULHUB: VHN-118435 // 
            
            
            
            BID: 103930 // 
            
            
            
            JVNDB: JVNDB-2018-004421 // 
            
            
            
            CNNVD: CNNVD-201804-1106 // 
            
            
            
            NVD: CVE-2018-0233

CREDITS
The vendor reported this issue.
Trust: 0.3
sources:
            
            
            BID: 103930

SOURCES
db:VULHUBid:VHN-118435
db:BIDid:103930
db:JVNDBid:JVNDB-2018-004421
db:CNNVDid:CNNVD-201804-1106
db:NVDid:CVE-2018-0233

LAST UPDATE DATE
2024-11-27T23:02:32.182000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-118435date:2019-10-09T00:00:00
db:BIDid:103930date:2018-04-18T00:00:00
db:JVNDBid:JVNDB-2018-004421date:2018-06-20T00:00:00
db:CNNVDid:CNNVD-201804-1106date:2020-05-19T00:00:00
db:NVDid:CVE-2018-0233date:2024-11-26T16:09:02.407

SOURCES RELEASE DATE
db:VULHUBid:VHN-118435date:2018-04-19T00:00:00
db:BIDid:103930date:2018-04-18T00:00:00
db:JVNDBid:JVNDB-2018-004421date:2018-06-20T00:00:00
db:CNNVDid:CNNVD-201804-1106date:2018-04-19T00:00:00
db:NVDid:CVE-2018-0233date:2018-04-19T20:29:00.580