CVE-2024-20342

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-20342
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-20342.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-20342
Published
2024-10-23T17:15:18.703Z
Modified
2026-07-08T06:34:00.890310865Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured rate limiting filter. 

This vulnerability is due to an incorrect connection count comparison. An attacker could exploit this vulnerability by sending traffic through an affected device at a rate that exceeds a configured rate filter. A successful exploit could allow the attacker to successfully bypass the rate filter. This could allow unintended traffic to enter the network protected by the affected device.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "7.0.6.2"
                },
                {
                    "introduced": "7.2.0"
                },
                {
                    "fixed": "7.2.6"
                },
                {
                    "introduced": "7.4.0"
                },
                {
                    "fixed": "7.4.2"
                }
            ],
            "cpes": [
                "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "cisco:firepower_threat_defense_software",
            "source": "CPE_RANGE"
        },
        {
            "extracted_events": [
                {
                    "introduced": "7.1.0"
                },
                {
                    "last_affected": "7.1.0"
                },
                {
                    "introduced": "7.3.0"
                },
                {
                    "last_affected": "7.3.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "cisco:firepower_threat_defense_software",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/snort3/snort3

Affected ranges

Type
GIT
Repo
https://github.com/snort3/snort3
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
7acc98e290fa2906737dc707d46b128070dbba93
Database specific 
{
    "cpe": "cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "3.0.0.0"
        },
        {
            "fixed": "3.1.74.0"
        }
    ]
}

Affected versions

3.*
3.0.0-233
3.0.0-239
3.0.0-240
3.0.0-241
3.0.0-242
3.0.0-243
3.0.0-244
3.0.0-245
3.0.0-246
3.0.0-247
3.0.0-248
3.0.0-249
3.0.0-250
3.0.0-251
3.0.0-252
3.0.0-253
3.0.0-254
3.0.0-255
3.0.0-256
3.0.0-257
3.0.0-258
3.0.0-259
3.0.0-260
3.0.0-261
3.0.0-262
3.0.0-263
3.0.0-264
3.0.0-265
3.0.0-266
3.0.0-267
3.0.0-268
3.0.0-269
3.0.0-270
3.0.0_253
3.0.1-1
3.0.1-2
3.0.1-3
3.0.1-4
3.0.1-5
3.0.2-1
3.0.2-2
3.0.2-3
3.0.2-4
3.0.2-5
3.0.2-6
3.0.3-1
3.0.3-2
3.0.3-3
3.0.3-4
3.0.3-5
3.0.3-6
3.1.0.0
3.1.1.0
3.1.10.0
3.1.11.0
3.1.12.0
3.1.13.0
3.1.14.0
3.1.15.0
3.1.16.0
3.1.17.0
3.1.18.0
3.1.19.0
3.1.2.0
3.1.20.0
3.1.21.0
3.1.22.0
3.1.23.0
3.1.24.0
3.1.25.0
3.1.26.0
3.1.27.0
3.1.28.0
3.1.29.0
3.1.3.0
3.1.30.0
3.1.31.0
3.1.32.0
3.1.33.0
3.1.34.0
3.1.35.0
3.1.36.0
3.1.37.0
3.1.38.0
3.1.39.0
3.1.4.0
3.1.40.0
3.1.41.0
3.1.42.0
3.1.43.0
3.1.45.0
3.1.47.0
3.1.48.0
3.1.49.0
3.1.5.0
3.1.50.0
3.1.51.0
3.1.52.0
3.1.53.0
3.1.55.0
3.1.56.0
3.1.57.0
3.1.58.0
3.1.59.0
3.1.6.0
3.1.60.0
3.1.61.0
3.1.62.0
3.1.63.0
3.1.64.0
3.1.65.0
3.1.66.0
3.1.67.0
3.1.69.0
3.1.7.0
3.1.70.0
3.1.71.0
3.1.72.0
3.1.73.0
3.1.8.0
3.1.9.0
Other
BUILD_233
BUILD_239
BUILD_240
BUILD_241
BUILD_242
BUILD_243
BUILD_247
BUILD_248

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-20342.json"