CVE-2018-0455

A vulnerability in the Server Message Block Version 2 (SMBv2) and Version 3 (SMBv3) protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the device to run low on system memory, possibly preventing the device from forwarding traffic. It is also possible that a manual reload of the device may be required to clear the condition. The vulnerability is due to incorrect SMB header validation. An attacker could exploit this vulnerability by sending a custom SMB file transfer through the targeted device. A successful exploit could cause the device to consume an excessive amount of system memory and prevent the SNORT process from forwarding network traffic. This vulnerability can be exploited using either IPv4 or IPv6 in combination with SMBv2 or SMBv3 network traffic.

• CWE-19

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-fp-smb-snortVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-fp-smb-snortVendor Advisory

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0449A vulnerability in the Cisco Jabber Client Framework (JCF) s…4.2
• CVE-2018-0450A vulnerability in the web-based management interface of Cis…
• CVE-2018-0451A vulnerability in the web-based management interface of Cis…
• CVE-2018-0452A vulnerability in the web-based management interface of Cis…
• CVE-2018-0453A vulnerability in the Sourcefire tunnel control channel pro…8.2
• CVE-2018-0454A vulnerability in the web-based management interface of Cis…
• CVE-2018-0456A vulnerability in the Simple Network Management Protocol (S…7.7
• CVE-2018-0457A vulnerability in the Cisco Webex Player for Webex Recordin…
• CVE-2018-0458A vulnerability in the web-based management interface of Cis…
• CVE-2018-0459A vulnerability in the web-based management interface of Cis…
• CVE-2018-0460A vulnerability in the REST API of Cisco Enterprise NFV Infr…
• CVE-2018-0461A vulnerability in the Cisco IP Phone 8800 Series Software c…6.5