CVE-2017-3887

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions prior to 6.2.0

Description A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process unexpectedly restarts. This issue affects systems configured with an SSL Decrypt-Resign policy.

Recommendations For versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue. For version 6.1.0, update to version 6.1.0.2 or later to resolve the issue.