Release Notes for Cisco Vulnerability Database (VDB) Update 338

About the Cisco Vulnerability Database

The Cisco vulnerability database (VDB) is a database of known vulnerabilities to which hosts may be susceptible, as well as fingerprints for operating systems, clients, and applications. The system uses the VDB to help determine whether a particular host increases your risk of compromise.

Cisco issues periodic updates to the VDB. The time it takes to update the VDB and its associated mappings on the Firepower Management Center depends on the number of hosts in your network map. As a rule of thumb, divide the number of hosts by 1000 to determine the approximate number of minutes to perform the update.

You can find VDB updates on the VDB Software Downloads page on Cisco.com.

About the Cisco Firepower Application Detector Reference

The Cisco Firepower Application Detector Reference contains the release notes and information about the application detectors supported in the VDB release. For each application listed in the reference, you can find the following information:

  • Description—A brief description of the application.

  • Categories—A general classification for the application that describes its most essential function. Example categories include web services provider, e-commerce, ad portal, and social networking.

  • Tags—Predefined tags that provide additional information about the application. Example tags include webmail, SSL protocol, file sharing/transfer, and displays ads. An application can have zero, one, or more tags.

  • Risk—The likelihood that the application is used for purposes that might be against your organization’s security policy. The risk levels are Very High, High, Medium, Low, and Very Low.

  • Business Relevance—The likelihood that the application is used within the context of your organization’s business operations, as opposed to recreationally. The relevance levels are Very High, High, Medium, Low, and Very Low.

Supported Platforms and Software Versions

This guide relates to Vulnerability Database Updates installed via the following software versions on the following platforms:

Sourcefire 3D System/Firepower System Version 5.x:

  • Cisco FireSIGHT Management Centers (formerly Defense Centers)

Firepower Version 6.x:

  • Cisco Firepower Management Centers (formerly Defense Centers/FireSIGHT Management Centers)

Supported Detector Types

The following Detector Types are supported:

  • application protocol

  • client

  • web application

Total Applications Supported in Vulnerability Database Update 338

Cisco Vulnerability Database (VDB) Update 338 supports 3,659 applications.

Vulnerability Database Update 338 Changelog

This section describes the changes from VDB 337 (4:52:14 PM on July 10th, 2020 UTC) to VDB 338 (1:00:29 PM on September 24th, 2020 UTC).

Application Protocol Detectors

Total Added:

0

Total Removed:

0

Total Updated

3

Client Detectors

Total Added:

0

Total Removed:

0

Total Updated

1

Web Application Detectors

Total Added:

4

Total Removed:

10

Total Updated

3

FireSIGHT/Firepower Detector Updates

Total Added:

0

Total Removed:

0

Total Updated

0

Operating System Fingerprint Details

Total Added:

0

Total Removed:

0

Total Updated

0

Operating System and Hardware Fingerprint Details

Total Added:

0

Total Removed:

0

Total Updated

0

Vulnerability References

Total Added:

196

Total Removed:

0

Total Updated

0

Fingerprint References

Total Added:

0

Total Removed:

0

Total Updated

0

File Type Detectors

Total Added:

0

Total Removed:

0

Total Updated

0

Operating System Fingerprint Details:

  • no additions or modifications

Operating System and Hardware Fingerprint Details:

  • no additions or modifications

Fingerprint Reference Details:

  • no additions or modifications

Application Protocol Detectors:

  • whois: Modified description and reduced risk from very high to high (Updated)

  • ISCSI: Added more coverage (Updated)

  • HTTP/2: Name changed from HTTP 2.0 to be in line with RFC standards. (Updated)

Client Detectors:

Web Application Detectors:

  • Bebo: Social networking and blogging. (Removed)

  • Octopz: Web based collaboration tool. (Removed)

  • Tetris Battle: Tetris for Facebook (Removed)

  • Playdom: A web gaming company that produces Facebook games. (Removed)

  • Readability: A browser plugin and mobile app that converts articles to a cleaner format. (Removed)

  • Triggit: Marketing service that generates ads. (Removed)

  • Nexage: Advertisement site. (Removed)

  • Nimbuzz: Instant messaging and SMS. (Removed)

  • Vube: Video upload and sharing site. (Removed)

  • Quant Code: General quant-code.com website traffic. (Removed)

  • Skype: Added Office 365 tag (Updated)

  • Skype for Business: Added Office 365 tag (Updated)

  • Apple News: Added SSL tag to the app (Updated)

  • Zoom Upload: Action of Uploading a file on Zoom. (Added)

  • Zoom Download: Downloading a file from Zoom. (Added)

  • Zoom Meeting: Participating in a meeting on Zoom. (Added)

  • Twilio: Cloud communications platform for building SMS, Voice, and Messaging applications on an API built for global scale. (Added)

FireSIGHT/Firepower Detector Updates:

  • no additions or modifications

File Type Detector Details:

  • no additions or modifications

Snort ID Vulnerability Reference Details:

  • CVE: 2005-4438 - Snort Reference ID 17282 (Added)

  • CVE: 2005-4438 - Snort Reference ID 54578 (Added)

  • CVE: 2010-4326 - Snort Reference ID 18768 (Added)

  • CVE: 2017-12477 - Snort Reference ID 54495 (Added)

  • CVE: 2017-8539 - Snort Reference ID 54788 (Added)

  • CVE: 2017-8539 - Snort Reference ID 54787 (Added)

  • CVE: 2018-13329 - Snort Reference ID 54774 (Added)

  • CVE: 2018-13329 - Snort Reference ID 54773 (Added)

  • CVE: 2018-13353 - Snort Reference ID 53970 (Added)

  • CVE: 2018-13353 - Snort Reference ID 53969 (Added)

  • CVE: 2018-13353 - Snort Reference ID 53968 (Added)

  • CVE: 2018-13353 - Snort Reference ID 53967 (Added)

  • CVE: 2018-13358 - Snort Reference ID 53970 (Added)

  • CVE: 2018-13358 - Snort Reference ID 53969 (Added)

  • CVE: 2018-13358 - Snort Reference ID 53968 (Added)

  • CVE: 2018-13358 - Snort Reference ID 53967 (Added)

  • CVE: 2018-13418 - Snort Reference ID 53970 (Added)

  • CVE: 2018-13418 - Snort Reference ID 53969 (Added)

  • CVE: 2018-13418 - Snort Reference ID 53968 (Added)

  • CVE: 2018-13418 - Snort Reference ID 53967 (Added)

  • CVE: 2018-15715 - Snort Reference ID 54616 (Added)

  • CVE: 2018-15715 - Snort Reference ID 54615 (Added)

  • CVE: 2018-15715 - Snort Reference ID 54614 (Added)

  • CVE: 2018-15715 - Snort Reference ID 54613 (Added)

  • CVE: 2019-12725 - Snort Reference ID 54797 (Added)

  • CVE: 2019-12725 - Snort Reference ID 54796 (Added)

  • CVE: 2019-12725 - Snort Reference ID 54795 (Added)

  • CVE: 2019-12725 - Snort Reference ID 54794 (Added)

  • CVE: 2019-13567 - Snort Reference ID 54637 (Added)

  • CVE: 2019-13567 - Snort Reference ID 54636 (Added)

  • CVE: 2019-13567 - Snort Reference ID 54728 (Added)

  • CVE: 2019-13567 - Snort Reference ID 54727 (Added)

  • CVE: 2019-13688 - Snort Reference ID 54498 (Added)

  • CVE: 2019-13688 - Snort Reference ID 54497 (Added)

  • CVE: 2019-9081 - Snort Reference ID 54603 (Added)

  • CVE: 2019-9081 - Snort Reference ID 54602 (Added)

  • CVE: 2019-9082 - Snort Reference ID 54903 (Added)

  • CVE: 2020-0605 - Snort Reference ID 54619 (Added)

  • CVE: 2020-0605 - Snort Reference ID 54618 (Added)

  • CVE: 2020-10713 - Snort Reference ID 54757 (Added)

  • CVE: 2020-10713 - Snort Reference ID 54756 (Added)

  • CVE: 2020-1147 - Snort Reference ID 54511 (Added)

  • CVE: 2020-1147 - Snort Reference ID 54629 (Added)

  • CVE: 2020-1147 - Snort Reference ID 54684 (Added)

  • CVE: 2020-1147 - Snort Reference ID 54790 (Added)

  • CVE: 2020-1147 - Snort Reference ID 54789 (Added)

  • CVE: 2020-11901 - Snort Reference ID 54706 (Added)

  • CVE: 2020-11901 - Snort Reference ID 54705 (Added)

  • CVE: 2020-12027 - Snort Reference ID 54671 (Added)

  • CVE: 2020-12027 - Snort Reference ID 54670 (Added)

  • CVE: 2020-12028 - Snort Reference ID 54674 (Added)

  • CVE: 2020-12028 - Snort Reference ID 54672 (Added)

  • CVE: 2020-12029 - Snort Reference ID 54675 (Added)

  • CVE: 2020-12029 - Snort Reference ID 54673 (Added)

  • CVE: 2020-1300 - Snort Reference ID 54527 (Added)

  • CVE: 2020-1300 - Snort Reference ID 54526 (Added)

  • CVE: 2020-1337 - Snort Reference ID 54820 (Added)

  • CVE: 2020-1337 - Snort Reference ID 54819 (Added)

  • CVE: 2020-1337 - Snort Reference ID 54818 (Added)

  • CVE: 2020-1337 - Snort Reference ID 54817 (Added)

  • CVE: 2020-1350 - Snort Reference ID 54518 (Added)

  • CVE: 2020-1350 - Snort Reference ID 54577 (Added)

  • CVE: 2020-1350 - Snort Reference ID 54576 (Added)

  • CVE: 2020-1350 - Snort Reference ID 54575 (Added)

  • CVE: 2020-13522 - Snort Reference ID 54581 (Added)

  • CVE: 2020-13522 - Snort Reference ID 54582 (Added)

  • CVE: 2020-13523 - Snort Reference ID 54579 (Added)

  • CVE: 2020-13523 - Snort Reference ID 54580 (Added)

  • CVE: 2020-1362 - Snort Reference ID 54593 (Added)

  • CVE: 2020-1362 - Snort Reference ID 54592 (Added)

  • CVE: 2020-1362 - Snort Reference ID 54591 (Added)

  • CVE: 2020-1362 - Snort Reference ID 54590 (Added)

  • CVE: 2020-13693 - Snort Reference ID 54597 (Added)

  • CVE: 2020-13693 - Snort Reference ID 54596 (Added)

  • CVE: 2020-1374 - Snort Reference ID 54523 (Added)

  • CVE: 2020-1380 - Snort Reference ID 54744 (Added)

  • CVE: 2020-1380 - Snort Reference ID 54743 (Added)

  • CVE: 2020-1381 - Snort Reference ID 54522 (Added)

  • CVE: 2020-1381 - Snort Reference ID 54521 (Added)

  • CVE: 2020-1382 - Snort Reference ID 54515 (Added)

  • CVE: 2020-1382 - Snort Reference ID 54514 (Added)

  • CVE: 2020-1382 - Snort Reference ID 54513 (Added)

  • CVE: 2020-1382 - Snort Reference ID 54512 (Added)

  • CVE: 2020-1399 - Snort Reference ID 54535 (Added)

  • CVE: 2020-1399 - Snort Reference ID 54534 (Added)

  • CVE: 2020-1403 - Snort Reference ID 54510 (Added)

  • CVE: 2020-1403 - Snort Reference ID 54509 (Added)

  • CVE: 2020-1410 - Snort Reference ID 54533 (Added)

  • CVE: 2020-1410 - Snort Reference ID 54532 (Added)

  • CVE: 2020-1410 - Snort Reference ID 54531 (Added)

  • CVE: 2020-1410 - Snort Reference ID 54530 (Added)

  • CVE: 2020-1410 - Snort Reference ID 54529 (Added)

  • CVE: 2020-1410 - Snort Reference ID 54528 (Added)

  • CVE: 2020-1426 - Snort Reference ID 54517 (Added)

  • CVE: 2020-1426 - Snort Reference ID 54516 (Added)

  • CVE: 2020-14645 - Snort Reference ID 54755 (Added)

  • CVE: 2020-1480 - Snort Reference ID 54746 (Added)

  • CVE: 2020-1480 - Snort Reference ID 54745 (Added)

  • CVE: 2020-14946 - Snort Reference ID 54556 (Added)

  • CVE: 2020-1529 - Snort Reference ID 54738 (Added)

  • CVE: 2020-1529 - Snort Reference ID 54737 (Added)

  • CVE: 2020-1566 - Snort Reference ID 54766 (Added)

  • CVE: 2020-1566 - Snort Reference ID 54765 (Added)

  • CVE: 2020-1567 - Snort Reference ID 54742 (Added)

  • CVE: 2020-1567 - Snort Reference ID 54741 (Added)

  • CVE: 2020-1570 - Snort Reference ID 54740 (Added)

  • CVE: 2020-1570 - Snort Reference ID 54739 (Added)

  • CVE: 2020-1578 - Snort Reference ID 54754 (Added)

  • CVE: 2020-1578 - Snort Reference ID 54753 (Added)

  • CVE: 2020-1584 - Snort Reference ID 54736 (Added)

  • CVE: 2020-1584 - Snort Reference ID 54735 (Added)

  • CVE: 2020-1587 - Snort Reference ID 54734 (Added)

  • CVE: 2020-1587 - Snort Reference ID 54733 (Added)

  • CVE: 2020-1956 - Snort Reference ID 54650 (Added)

  • CVE: 2020-1956 - Snort Reference ID 54649 (Added)

  • CVE: 2020-3140 - Snort Reference ID 54568 (Added)

  • CVE: 2020-3144 - Snort Reference ID 54557 (Added)

  • CVE: 2020-3145 - Snort Reference ID 54564 (Added)

  • CVE: 2020-3145 - Snort Reference ID 54560 (Added)

  • CVE: 2020-3145 - Snort Reference ID 54561 (Added)

  • CVE: 2020-3145 - Snort Reference ID 54562 (Added)

  • CVE: 2020-3145 - Snort Reference ID 54563 (Added)

  • CVE: 2020-3146 - Snort Reference ID 54564 (Added)

  • CVE: 2020-3146 - Snort Reference ID 54560 (Added)

  • CVE: 2020-3146 - Snort Reference ID 54561 (Added)

  • CVE: 2020-3146 - Snort Reference ID 54562 (Added)

  • CVE: 2020-3146 - Snort Reference ID 54563 (Added)

  • CVE: 2020-3323 - Snort Reference ID 54548 (Added)

  • CVE: 2020-3323 - Snort Reference ID 54549 (Added)

  • CVE: 2020-3323 - Snort Reference ID 54550 (Added)

  • CVE: 2020-3323 - Snort Reference ID 54551 (Added)

  • CVE: 2020-3330 - Snort Reference ID 54544 (Added)

  • CVE: 2020-3331 - Snort Reference ID 54548 (Added)

  • CVE: 2020-3331 - Snort Reference ID 54549 (Added)

  • CVE: 2020-3331 - Snort Reference ID 54550 (Added)

  • CVE: 2020-3331 - Snort Reference ID 54551 (Added)

  • CVE: 2020-3332 - Snort Reference ID 54538 (Added)

  • CVE: 2020-3332 - Snort Reference ID 54539 (Added)

  • CVE: 2020-3332 - Snort Reference ID 54540 (Added)

  • CVE: 2020-3332 - Snort Reference ID 54541 (Added)

  • CVE: 2020-3338 - Snort Reference ID 54899 (Added)

  • CVE: 2020-3357 - Snort Reference ID 54542 (Added)

  • CVE: 2020-3357 - Snort Reference ID 54543 (Added)

  • CVE: 2020-3358 - Snort Reference ID 54552 (Added)

  • CVE: 2020-3376 - Snort Reference ID 54656 (Added)

  • CVE: 2020-3381 - Snort Reference ID 54553 (Added)

  • CVE: 2020-3383 - Snort Reference ID 54668 (Added)

  • CVE: 2020-3383 - Snort Reference ID 53504 (Added)

  • CVE: 2020-3383 - Snort Reference ID 54667 (Added)

  • CVE: 2020-3384 - Snort Reference ID 54655 (Added)

  • CVE: 2020-3386 - Snort Reference ID 54696 (Added)

  • CVE: 2020-3386 - Snort Reference ID 54697 (Added)

  • CVE: 2020-3386 - Snort Reference ID 54698 (Added)

  • CVE: 2020-3386 - Snort Reference ID 54699 (Added)

  • CVE: 2020-3386 - Snort Reference ID 54700 (Added)

  • CVE: 2020-3387 - Snort Reference ID 54545 (Added)

  • CVE: 2020-3387 - Snort Reference ID 54546 (Added)

  • CVE: 2020-3387 - Snort Reference ID 54547 (Added)

  • CVE: 2020-3398 - Snort Reference ID 54896 (Added)

  • CVE: 2020-3433 - Snort Reference ID 54694 (Added)

  • CVE: 2020-3433 - Snort Reference ID 54695 (Added)

  • CVE: 2020-3452 - Snort Reference ID 54598 (Added)

  • CVE: 2020-3452 - Snort Reference ID 54599 (Added)

  • CVE: 2020-3452 - Snort Reference ID 54600 (Added)

  • CVE: 2020-3452 - Snort Reference ID 54601 (Added)

  • CVE: 2020-3928 - Snort Reference ID 54617 (Added)

  • CVE: 2020-5902 - Snort Reference ID 54462 (Added)

  • CVE: 2020-5902 - Snort Reference ID 54484 (Added)

  • CVE: 2020-5903 - Snort Reference ID 54462 (Added)

  • CVE: 2020-6070 - Snort Reference ID 53004 (Added)

  • CVE: 2020-6070 - Snort Reference ID 53005 (Added)

  • CVE: 2020-6098 - Snort Reference ID 53562 (Added)

  • CVE: 2020-6100 - Snort Reference ID 53545 (Added)

  • CVE: 2020-6100 - Snort Reference ID 53546 (Added)

  • CVE: 2020-6101 - Snort Reference ID 52842 (Added)

  • CVE: 2020-6101 - Snort Reference ID 52843 (Added)

  • CVE: 2020-6102 - Snort Reference ID 53553 (Added)

  • CVE: 2020-6102 - Snort Reference ID 53554 (Added)

  • CVE: 2020-6103 - Snort Reference ID 53549 (Added)

  • CVE: 2020-6103 - Snort Reference ID 53550 (Added)

  • CVE: 2020-6114 - Snort Reference ID 53944 (Added)

  • CVE: 2020-6114 - Snort Reference ID 53945 (Added)

  • CVE: 2020-6145 - Snort Reference ID 54290 (Added)

  • CVE: 2020-6286 - Snort Reference ID 54572 (Added)

  • CVE: 2020-6286 - Snort Reference ID 54571 (Added)

  • CVE: 2020-6287 - Snort Reference ID 54574 (Added)

  • CVE: 2020-6287 - Snort Reference ID 54573 (Added)

  • CVE: 2020-6287 - Snort Reference ID 54572 (Added)

  • CVE: 2020-6287 - Snort Reference ID 54571 (Added)

  • CVE: 2020-6390 - Snort Reference ID 54623 (Added)

  • CVE: 2020-6390 - Snort Reference ID 54622 (Added)

  • CVE: 2020-6651 - Snort Reference ID 54583 (Added)

  • CVE: 2020-7980 - Snort Reference ID 54824 (Added)

  • CVE: 2020-8617 - Snort Reference ID 54630 (Added)

  • CVE: 2020-9802 - Snort Reference ID 54666 (Added)

  • CVE: 2020-9802 - Snort Reference ID 54665 (Added)

For Assistance

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information about Cisco Firepower devices, see What's New in Cisco Product Documentation.

Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service. If you have any questions or require assistance with Cisco ASA devices, please contact Cisco Support:

  • Note: To open a TAC request, you must first register for a Cisco.com user ID

  • Once you have a Cisco.com user ID, you may initiate or check on the status of a service request online or contacting the TAC by phone:

  • For additional information on obtaining technical support through the TAC, please consult the Technical Support Reference Guide (PDF - 1 MB)

About Talos

The Talos Security Intelligence and Research Group (Talos) is made up of leading threat researchers supported by sophisticated systems to create threat intelligence for Cisco products that detects, analyzes and protects against both known and emerging threats. Talos maintains the official rule sets of Snort.org, ClamAV, SenderBase.org and SpamCop. The team's expertise spans software development, reverse engineering, vulnerability triage, malware investigation and intelligence gathering.