/
← Voltar ao feed
medium

Cisco Snort 3 SMTP MIME Decoder flaw (CVE-2026-20011) enables remote DoS via Detection Engine restart

1 fonte(s) · 1 atualização(ões) · publicado 21/10/2026 13:00 · coletado há 2 dias

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco disclosed CVE-2026-20011, a medium-severity vulnerability in the Snort 3 SMTP MIME Decoder affecting multiple Cisco products. An unauthenticated, remote attacker can cause the Snort 3 Detection Engine to restart, producing a denial-of-service condition. Cisco has released software updates, and no workarounds exist. The advisory is part of the Cisco October 21, 2026 advance-notification bundle and relates to the Snort 3 Security Hardening Release of October 2026. The article does not report exploitation in the wild.

Detalhes técnicos

  • Root cause: lack of error checking when parsing MIME fields in SMTP headers.
  • Exploitation: the attacker sends crafted SMTP packets over an established connection to be parsed by Snort 3.
  • Impact: unexpected restart of the Snort 3 Detection Engine, interrupting inspection (DoS).
  • Cisco rates the Security Impact as Medium.

Remediação

  • Apply the Cisco software updates that address the vulnerability.
  • No workarounds are available.
  • See the Cisco advisory cisco-sa-snort3-mime-vulns-bkXjcKkt and the Snort 3 Security Hardening Release: October 2026 for details.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 21/10/2026 13:00 · coletado 21/10 14:00 primeiro registro só resumo do feed

    Cisco Snort 3 SMTP MIME Decoder flaw (CVE-2026-20011) enables remote DoS via Detection Engine restart

    ler a análise desta fonte

    Cisco disclosed CVE-2026-20011, a medium-severity vulnerability in the Snort 3 SMTP MIME Decoder affecting multiple Cisco products. An unauthenticated, remote attacker can cause the Snort 3 Detection Engine to restart, producing a denial-of-service condition. Cisco has released software updates, and no workarounds exist. The advisory is part of the Cisco October 21, 2026 advance-notification bundle and relates to the Snort 3 Security Hardening Release of October 2026. The article does not report exploitation in the wild.

    Technical Details

    • Root cause: lack of error checking when parsing MIME fields in SMTP headers.
    • Exploitation: the attacker sends crafted SMTP packets over an established connection to be parsed by Snort 3.
    • Impact: unexpected restart of the Snort 3 Detection Engine, interrupting inspection (DoS).
    • Cisco rates the Security Impact as Medium.

    Remediation

    • Apply the Cisco software updates that address the vulnerability.
    • No workarounds are available.
    • See the Cisco advisory cisco-sa-snort3-mime-vulns-bkXjcKkt and the Snort 3 Security Hardening Release: October 2026 for details.