CVE-2015-6307 Denial of service in n/a
Remote attackers can cause a denial of service on Cisco FirePOWER devices by sending crafted packets, disrupting inspection engines.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-6307?
CVE-2015-6307 is a medium-severity denial of service vulnerability in n/a, published on 28 Sep 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 devices with software 5.4.0.1 allow remote attackers to cause a denial of service (inspection-engine outage) via crafted packets, aka Bug ID CSCuu10871.
Weakness: CWE-399
Which versions are affected by CVE-2015-6307?
It affects 1 product.
Products include Cisco Firepower.
How do I fix CVE-2015-6307?
No fix has been published for CVE-2015-6307 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-6307 being exploited?
There is no known exploitation of CVE-2015-6307 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2018-0272 Denial of service in Cisco Firepower Threat Defense
- CVE-2019-12696 Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities
- CVE-2019-12697 Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities
Sources
Also known as GHSA-qpj2-qj62-9mwf.