https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:34:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-00416 bdu:2021-00416 https://cve.radiocsirt.org/vuln/bdu:2021-00416 https://cve.radiocsirt.org/vuln/cisco-sa-snort-tfo-bypass-mmzzrtes <p>Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.</p> <p>Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-snort-tfo-bypass-mmzzrtes https://cve.radiocsirt.org/vuln/euvd-2026-201041 EUVD-2026-201041 https://cve.radiocsirt.org/vuln/euvd-2026-201041 https://cve.radiocsirt.org/vuln/fkie_cve-2021-1224 <p>Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.</p> <p>Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-1224 https://cve.radiocsirt.org/vuln/ghsa-p854-c355-26cj <p>Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.</p> <p>Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.</p> https://cve.radiocsirt.org/vuln/ghsa-p854-c355-26cj https://cve.radiocsirt.org/vuln/gsd-2021-1224 gsd-2021-1224 https://cve.radiocsirt.org/vuln/gsd-2021-1224 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-1224 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: snort, Ubuntu:16.04:LTS: snort, Ubuntu:18.04:LTS: snort, Ubuntu:20.04:LTS: snort, Ubuntu:22.04:LTS: snort</p> <p>Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: snort, Ubuntu:16.04:LTS: snort, Ubuntu:18.04:LTS: snort, Ubuntu:20.04:LTS: snort, Ubuntu:22.04:LTS: snort</p> <p>Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-1224 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0339 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Snort und verschiedenen Cisco Produkten ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Snort und verschiedenen Cisco Produkten ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0339