MGASA-2023-0117 Updated snort packages fix security vulnerability

🗓️ 31 Mar 2023 00:13:46Reported by GoogleType

osv🔗 osv.dev👁 8 Views

Multiple Cisco products vulnerable due to Snort engine flaws allowing file policy bypass.

Reporter	Title	Published	Views	Family All 173
ATTACKERKB	CVE-2021-40114	27 Oct 202116:00	–	attackerkb
AlpineLinux	CVE-2021-40114	27 Oct 202118:56	–	alpinelinux
BDU FSTEC	The vulnerabilities of the Snort mechanism on the Cisco IOS operating system, the Cisco Firepower Threat Defense network firewall, and the Cisco Firepower Management Center network management software allow attackers to compromise the integrity of protected information.	19 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort intrusion detection system, which includes Cisco Firepower Threat Defense (FTD) for microprogramming network firewalls, Cisco SD-WAN for programmatically defined networks, Cisco IOS XE for network operating systems, and Cisco Meraki for networking devices, allows attackers to bypass security measures and execute malicious activities.	19 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TCP Fast Open (TFO) protocol extension in the Snort intrusion detection system allows a hacker to bypass the configured file policy for HTTP.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the detection mechanism for applications in the Snort intrusion detection system allows attackers to increase their privileges.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort intrusion detection system, related to errors in processing HTTP headers, allows a perpetrator to bypass the configured file policy for HTTP.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), which includes network devices like Cisco Catalyst, routers such as ISR and ISA, and the virtual router with integrated ISRv services, allows attackers to compromise the integrity of protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), which includes network devices like Cisco Catalyst, routers such as ISR and ISA, and the virtual router with integrated ISRv services, allows attackers to compromise the integrity of protected information.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Server Name Identification (SNI) component of the Cisco Web Security Appliance internet server, the micro-programming software for Cisco Firepower Threat Defense network firewalls, and the intrusion detection systems allows a malicious actor to gain full control over the compromised host and unauthorized access to protected information.	20 Aug 202100:00	–	bdu_fstec

Source	Link
advisories	www.advisories.mageia.org/MGASA-2023-0117.html
bugs	www.bugs.mageia.org/show_bug.cgi
debian	www.debian.org/lts/security/2023/dla-3317

16 Apr 2026 04:44Current

8.4High risk

Vulners AI Score8.4

CVSS 27.8

CVSS 3.16.8 - 8.6

CVSS 35.8

EPSS0.02367

SSVC