{ "affected": [ { "ranges": [ { "database_specific": { "cpe": "cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "3.0.0-233" }, { "fixed": "3.9.7.0" } ], "source": "CPE_RANGE" }, "events": [ { "introduced": "7ae50f4be245efd469dee2ce2855b6235b07aa42" }, { "fixed": "892f9f3b04d604797851d60e89d6cfe640a047cd" } ], "repo": "https://github.com/snort3/snort3", "type": "GIT" } ] } ], "database_specific": { "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.0:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10.1:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "7.4.0" }, { "last_affected": "7.4.0" }, { "introduced": "7.4.1" }, { "last_affected": "7.4.1" }, { "introduced": "7.4.1.1" }, { "last_affected": "7.4.1.1" }, { "introduced": "7.4.2" }, { "last_affected": "7.4.2" }, { "introduced": "7.4.2.1" }, { "last_affected": "7.4.2.1" }, { "introduced": "7.4.2.2" }, { "last_affected": "7.4.2.2" }, { "introduced": "7.4.2.3" }, { "last_affected": "7.4.2.3" }, { "introduced": "7.4.2.4" }, { "last_affected": "7.4.2.4" }, { "introduced": "7.4.3" }, { "last_affected": "7.4.3" }, { "introduced": "7.6.0" }, { "last_affected": "7.6.0" }, { "introduced": "7.6.1" }, { "last_affected": "7.6.1" }, { "introduced": "7.6.2" }, { "last_affected": "7.6.2" }, { "introduced": "7.6.2.1" }, { "last_affected": "7.6.2.1" }, { "introduced": "7.7.0" }, { "last_affected": "7.7.0" }, { "introduced": "7.7.10" }, { "last_affected": "7.7.10" }, { "introduced": "7.7.10.1" }, { "last_affected": "7.7.10.1" } ], "source": "CPE_STRING", "vendor_product": "cisco:secure_firewall_threat_defense" }, { "cpes": [ "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.10.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.11.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4b:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5b:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5c:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5d:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.6:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.13.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.14.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2c:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4c:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.16.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.17.1:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.2:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.2.1r:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.2:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.3:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.4a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.5:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.6:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.7:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.8:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.3.8a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.1b:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.5.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.2:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.3:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.3a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.4:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.5:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.6:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.6a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.7:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.8:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.6.8a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.7.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.7.2:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.8.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.1a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.2a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.3a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.4:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.4a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5e:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5f:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.6:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.7a:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.7b:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.8:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "17.2.1r" }, { "last_affected": "17.2.1r" }, { "introduced": "17.3.1a" }, { "last_affected": "17.3.1a" }, { "introduced": "17.3.2" }, { "last_affected": "17.3.2" }, { "introduced": "17.3.3" }, { "last_affected": "17.3.3" }, { "introduced": "17.3.4" }, { "last_affected": "17.3.4" }, { "introduced": "17.3.4a" }, { "last_affected": "17.3.4a" }, { "introduced": "17.3.5" }, { "last_affected": "17.3.5" }, { "introduced": "17.3.6" }, { "last_affected": "17.3.6" }, { "introduced": "17.3.7" }, { "last_affected": "17.3.7" }, { "introduced": "17.3.8" }, { "last_affected": "17.3.8" }, { "introduced": "17.3.8a" }, { "last_affected": "17.3.8a" }, { "introduced": "17.4.1a" }, { "last_affected": "17.4.1a" }, { "introduced": "17.4.1b" }, { "last_affected": "17.4.1b" }, { "introduced": "17.4.2" }, { "last_affected": "17.4.2" }, { "introduced": "17.5.1" }, { "last_affected": "17.5.1" }, { "introduced": "17.5.1a" }, { "last_affected": "17.5.1a" }, { "introduced": "17.6.1a" }, { "last_affected": "17.6.1a" }, { "introduced": "17.6.2" }, { "last_affected": "17.6.2" }, { "introduced": "17.6.3" }, { "last_affected": "17.6.3" }, { "introduced": "17.6.3a" }, { "last_affected": "17.6.3a" }, { "introduced": "17.6.4" }, { "last_affected": "17.6.4" }, { "introduced": "17.6.5" }, { "last_affected": "17.6.5" }, { "introduced": "17.6.6" }, { "last_affected": "17.6.6" }, { "introduced": "17.6.6a" }, { "last_affected": "17.6.6a" }, { "introduced": "17.6.7" }, { "last_affected": "17.6.7" }, { "introduced": "17.6.8" }, { "last_affected": "17.6.8" }, { "introduced": "17.6.8a" }, { "last_affected": "17.6.8a" }, { "introduced": "17.7.1a" }, { "last_affected": "17.7.1a" }, { "introduced": "17.7.2" }, { "last_affected": "17.7.2" }, { "introduced": "17.8.1a" }, { "last_affected": "17.8.1a" }, { "introduced": "17.9.1a" }, { "last_affected": "17.9.1a" }, { "introduced": "17.9.2a" }, { "last_affected": "17.9.2a" }, { "introduced": "17.9.3a" }, { "last_affected": "17.9.3a" }, { "introduced": "17.9.4" }, { "last_affected": "17.9.4" }, { "introduced": "17.9.4a" }, { "last_affected": "17.9.4a" }, { "introduced": "17.9.5a" }, { "last_affected": "17.9.5a" }, { "introduced": "17.9.5e" }, { "last_affected": "17.9.5e" }, { "introduced": "17.9.5f" }, { "last_affected": "17.9.5f" }, { "introduced": "17.9.6" }, { "last_affected": "17.9.6" }, { "introduced": "17.9.7a" }, { "last_affected": "17.9.7a" }, { "introduced": "17.9.7b" }, { "last_affected": "17.9.7b" }, { "introduced": "17.9.8" }, { "last_affected": "17.9.8" }, { "introduced": "17.10.1a" }, { "last_affected": "17.10.1a" }, { "introduced": "17.11.1a" }, { "last_affected": "17.11.1a" }, { "introduced": "17.12.1a" }, { "last_affected": "17.12.1a" }, { "introduced": "17.12.2" }, { "last_affected": "17.12.2" }, { "introduced": "17.12.3" }, { "last_affected": "17.12.3" }, { "introduced": "17.12.3a" }, { "last_affected": "17.12.3a" }, { "introduced": "17.12.4" }, { "last_affected": "17.12.4" }, { "introduced": "17.12.4a" }, { "last_affected": "17.12.4a" }, { "introduced": "17.12.4b" }, { "last_affected": "17.12.4b" }, { "introduced": "17.12.5" }, { "last_affected": "17.12.5" }, { "introduced": "17.12.5a" }, { "last_affected": "17.12.5a" }, { "introduced": "17.12.5b" }, { "last_affected": "17.12.5b" }, { "introduced": "17.12.5c" }, { "last_affected": "17.12.5c" }, { "introduced": "17.12.5d" }, { "last_affected": "17.12.5d" }, { "introduced": "17.12.6" }, { "last_affected": "17.12.6" }, { "introduced": "17.13.1a" }, { "last_affected": "17.13.1a" }, { "introduced": "17.14.1a" }, { "last_affected": "17.14.1a" }, { "introduced": "17.15.1a" }, { "last_affected": "17.15.1a" }, { "introduced": "17.15.2a" }, { "last_affected": "17.15.2a" }, { "introduced": "17.15.2c" }, { "last_affected": "17.15.2c" }, { "introduced": "17.15.3" }, { "last_affected": "17.15.3" }, { "introduced": "17.15.3a" }, { "last_affected": "17.15.3a" }, { "introduced": "17.15.4" }, { "last_affected": "17.15.4" }, { "introduced": "17.15.4c" }, { "last_affected": "17.15.4c" }, { "introduced": "17.16.1a" }, { "last_affected": "17.16.1a" }, { "introduced": "17.17.1" }, { "last_affected": "17.17.1" }, { "introduced": "17.18.1" }, { "last_affected": "17.18.1" }, { "introduced": "17.18.1a" }, { "last_affected": "17.18.1a" }, { "introduced": "17.18.2" }, { "last_affected": "17.18.2" } ], "source": "CPE_STRING", "vendor_product": "cisco:unified_threat_defense_snort_intrusion_prevention_system_engine" } ] }, "details": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in the JSTokenizer normalization logic when the HTTP inspection normalizes JavaScript. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection that is parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine restarts unexpectedly. JSTokenizer is not enabled by default.", "id": "CVE-2026-20066", "modified": "2026-08-21T03:30:40.594628959Z", "published": "2026-03-04T18:16:21.670Z", "references": [ { "type": "ADVISORY", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz" } ], "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "type": "CVSS_V3" } ] }