csirt@kutim:~/threat-intel/cve/CVE-2026-20067

Katalog CVE

CVSS 5.8 · Medium EPSS 0,47%

Kerentanan Out-of-bounds Write pada cisco snort, cisco cyber vision +1 lainnya. Skor CVSS 3.1 5.8 (Medium) menurut cisco.com.

Deskripsi (NVD)

Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.  This vulnerability is due to incomplete error checking when parsing the Multicast DNS fields of the HTTP header. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine unexpectedly restarts.

Rincian

Terbit di NVD
4 Maret 2026
Terakhir diubah
19 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
5.8 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,47% peluang dieksploitasi; lebih tinggi dari 39,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco snort Versi 3.0.0-233 hingga sebelum 3.9.5.0
cisco cyber vision Versi 3.0.0
cisco cyber vision Versi 3.0.1
cisco cyber vision Versi 3.0.2
cisco cyber vision Versi 3.0.3
cisco cyber vision Versi 3.0.4
cisco cyber vision Versi 3.0.5
cisco cyber vision Versi 3.0.6
cisco cyber vision Versi 3.1.0
cisco cyber vision Versi 3.1.1
cisco cyber vision Versi 3.1.2
cisco cyber vision Versi 3.2.0
cisco cyber vision Versi 3.2.1
cisco cyber vision Versi 3.2.2
cisco cyber vision Versi 3.2.3
cisco cyber vision Versi 3.2.4
cisco cyber vision Versi 4.0.0
cisco cyber vision Versi 4.0.1
cisco cyber vision Versi 4.0.2
cisco cyber vision Versi 4.0.3
cisco cyber vision Versi 4.1.0
cisco cyber vision Versi 4.1.1
cisco cyber vision Versi 4.1.2
cisco cyber vision Versi 4.1.3
cisco cyber vision Versi 4.1.4
cisco cyber vision Versi 4.1.5
cisco cyber vision Versi 4.1.6
cisco cyber vision Versi 4.1.7
cisco cyber vision Versi 4.2.0
cisco cyber vision Versi 4.2.1
cisco cyber vision Versi 4.2.2
cisco cyber vision Versi 4.2.3
cisco cyber vision Versi 4.2.4
cisco cyber vision Versi 4.2.6
cisco cyber vision Versi 4.3.0
cisco cyber vision Versi 4.3.1
cisco cyber vision Versi 4.3.2
cisco cyber vision Versi 4.3.3
cisco cyber vision Versi 4.4.0
cisco cyber vision Versi 4.4.1
cisco cyber vision Versi 4.4.2
cisco cyber vision Versi 4.4.3
cisco cyber vision Versi 5.0.0
cisco cyber vision Versi 5.0.1
cisco cyber vision Versi 5.0.2
cisco cyber vision Versi 5.1.0
cisco cyber vision Versi 5.1.1
cisco cyber vision Versi 5.1.2
cisco cyber vision Versi 5.1.3
cisco cyber vision Versi 5.2.0
cisco cyber vision Versi 5.2.1
cisco cyber vision Versi 5.3.0
cisco cyber vision Versi 5.3.1
cisco cyber vision Versi 5.3.2
cisco secure firewall threat defense Versi 7.0.0
cisco secure firewall threat defense Versi 7.0.0.1
cisco secure firewall threat defense Versi 7.0.1
cisco secure firewall threat defense Versi 7.0.1.1
cisco secure firewall threat defense Versi 7.0.2
cisco secure firewall threat defense Versi 7.0.2.1

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 182 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.