{"schemaVersion":3,"id":"CVE-2022-20767","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of the DNS reputation enforcement rule. An attacker could exploit this vulnerability by sending crafted UDP packets through an affected device to force a buildup of UDP connections. A successful exploit could allow the attacker to cause traffic that is going through the affected device to be dropped, resulting in a DoS condition. Note: This vulnerability only affects Cisco FTD devices that are running Snort 3.","dates":{"published":"2022-05-03T03:15:50.804Z","modified":"2024-11-06T16:20:05.356Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.6,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.8,"severity":"high","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01685,"percentile":0.76664,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.040000000000000105,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01645},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01685,"percentile":0.76664}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01645,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01671,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01685,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01685,"percentile":0.76664}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-399","name":"Resource Management Errors","description":"Weaknesses in this category are related to improper management of system resources.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/399.html"},{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"cisco","product":"cisco firepower threat defense software","name":"Cisco Firepower Threat Defense Software","label":"cisco firepower threat defense software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"n/a","noFixRecorded":false,"fixedIn":null}],"versionsText":"n/a","eol":null,"hubHref":"/vendor/cisco/cisco_firepower_threat_defense_software"},{"vendor":"cisco","product":"secure_firewall_threat_defense","name":"secure firewall threat defense","label":"secure_firewall_threat_defense","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.0.2","noFixRecorded":false,"fixedIn":null},{"text":"7.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.2 | 7.1.0","eol":null,"hubHref":"/vendor/cisco/secure_firewall_threat_defense"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FTD-snort3-DOS-Aq38LVdM","label":"tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-FTD-snort3-DOS-Aq38LVdM","hostname":"tools.cisco.com","tags":["Vendor Advisory","X Refsource CISCO","Mitigation"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-05-03T03:15:50.804Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-11-06T16:20:05.356Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:36:45.260Z","stale":false,"partial":false}}