CVE-2021-1236
Published: 13 January 2021
Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.
Notes
| Author | Note |
|---|---|
| yomonokio | There is no access to the actual fix for this CVE nor workarounds that address this vulnerability |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
snort Launchpad, Ubuntu, Debian |
bionic |
Needed
|
| focal |
Needed
|
|
| impish |
Not vulnerable
(2.9.15.1-5)
|
|
| jammy |
Not vulnerable
(2.9.15.1-5)
|
|
| kinetic |
Not vulnerable
(2.9.15.1-5)
|
|
| lunar |
Not vulnerable
(2.9.15.1-5)
|
|
| mantic |
Not vulnerable
(2.9.15.1-5)
|
|
| noble |
Not vulnerable
(2.9.15.1-5)
|
|
| trusty |
Needed
|
|
| upstream |
Released
(2.9.15.1-1)
|
|
| xenial |
Needed
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.3 |
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | Low |
| Availability impact | None |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |