Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition.
The vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers are processed within the codec. An attacker could exploit this vulnerability by sending a crafted, fragmented UDP datagram that contains these headers to the Snort 3 Detection Engine of an affected device. A successful exploit could allow the attacker to cause the detection engine to enter an infinite loop, resulting in a DoS condition.
Metrics
Affected Vendors & Products
References
History
Fri, 23 Oct 2026 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Cisco
Cisco cisco Open Source Snort3 Cisco cisco Secure Firewall Threat Defense (ftd) Software Cisco cisco Utd Snort Ips Engine Software Cisco secure Firewall Threat Defense |
|
| Vendors & Products |
Cisco
Cisco cisco Open Source Snort3 Cisco cisco Secure Firewall Threat Defense (ftd) Software Cisco cisco Utd Snort Ips Engine Software Cisco secure Firewall Threat Defense |
Thu, 22 Oct 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 21 Oct 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers are processed within the codec. An attacker could exploit this vulnerability by sending a crafted, fragmented UDP datagram that contains these headers to the Snort 3 Detection Engine of an affected device. A successful exploit could allow the attacker to cause the detection engine to enter an infinite loop, resulting in a DoS condition. | |
| Title | Multiple Cisco Products Snort 3 Denial of Service Vulnerability | |
| Weaknesses | CWE-835 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: cisco
Published: 2026-10-21T16:14:39.374Z
Updated: 2026-10-22T19:11:11.783Z
Reserved: 2026-08-19T12:02:03.635Z
Link: CVE-2026-76445
Updated: 2026-10-22T13:36:19.653Z
Status : Awaiting Analysis
Published: 2026-10-21T17:19:06.427
Modified: 2026-10-22T14:17:45.710
Link: CVE-2026-76445
No data.