PT-2017-10001 · Cisco · Cisco Asa

Publicado 2017-02-01 · Atualizado 2019-10-09 · CVE-2016-9225

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security module (affected versions not specified)

Description A vulnerability in the data plane IP fragment handler could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition by sending crafted fragmented IP traffic. The issue is due to improper handling of IP fragments, which can lead to the exhaustion of free packet buffers in shared memory, preventing the module from processing further traffic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-9225

Produtos afetados

Cisco Asa

Referências · 5

• http://securityfocus.com/bid/95788 · Nota
• https://osv.dev/vulnerability/CVE-2016-9225 · Aviso do Fabricante
• http://securitytracker.com/id/1037696 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9225 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-cas · Aviso do Fabricante