====================================================================

                              CERT-Renater

                   Note d'Information No. 2016/VULN357
_____________________________________________________________________

DATE                : 19/10/2016

HARDWARE PLATFORM(S): Cisco Firepower.

OPERATING SYSTEM(S): Cisco Firepower System Software.

=====================================================================
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-fpsnort
____________________________________________________________________

Cisco Security Advisory: Cisco Firepower Detection Engine HTTP Denial
of Service Vulnerability

Advisory ID: cisco-sa-20161019-fpsnort

Revision 1.0

For Public Release 2016 October 19 16:00 UTC (GMT)

+---------------------------------------------------------------------

Summary
=======

A vulnerability in the detection engine reassembly of HTTP packets for
Cisco Firepower System Software could allow an unauthenticated, remote
attacker to cause a denial of service (DoS) condition due to the Snort
process unexpectedly restarting.

The vulnerability is due to improper handling of an HTTP packet stream.
An attacker could exploit this vulnerability by sending a crafted HTTP
packet stream to the detection engine on the targeted device. An
exploit could allow the attacker to cause a DoS condition if the Snort
process restarts and traffic inspection is bypassed or traffic is
dropped.

Cisco has released software updates that address this vulnerability.
There are no workarounds that address this vulnerability.

This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-fpsnort

==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================