CVE:CVE-2020-3179
CNNVD:CNNVD-202005-202
Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。
Cisco FTD 6.3.0版本和6.4.0版本中存在资源管理错误漏洞，该漏洞源于在处理GRE over IPv6流量时出现内存处理错误。远程攻击者可借助带有IPv4或IPv6 payload的特制数据包利用该漏洞造成拒绝服务。
solution:Upgrade cisco firepower_threat_defense to a higher version than 6.3.0.5,6.4.0.6,and avoid the version [6.3.0,6.3.0.5),[6.4.0,6.4.0.6); Upgrade cisco asa_5505_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5510_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5512-x_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5515-x_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5520_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5525-x_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5540_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5545-x_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5550_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5555-x_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5580_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26); Upgrade cisco asa_5585-x_firmware to a higher version than 9.9(2,101.5(1.26,and avoid the version 9.9(2),101.5(1.26)