A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service (DoS) condition. The vulnerability exists because the affected software improperly manages system memory resources when inspecting traffic. An attacker could exploit this vulnerability by generating specific traffic patterns for the software to inspect. A successful exploit could allow the attacker to exhaust system memory resources used for traffic inspection. Depending on the configuration, the FTD Software could fail open and cease to inspect traffic or fail closed and result in a DoS condition. This vulnerability may require manual intervention to restore the software.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/106721 | Third Party Advisory |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-firepowertds-bypass | Vendor Advisory |
| http://www.securityfocus.com/bid/106721 | Third Party Advisory |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-firepowertds-bypass | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/106721 - Third Party Advisory | |
| References | () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-firepowertds-bypass - Vendor Advisory |
Information
Published : 2019-01-24 16:29
Updated : 2024-11-21 04:37
NVD link : CVE-2019-1669
Mitre link : CVE-2019-1669
CVE.ORG link : CVE-2019-1669
JSON object : View
Products Affected
cisco
- firepower_threat_defense
CWE
CWE-693
Protection Mechanism Failure