PT-2013-5597 · Cisco · Cisco Asa

Published

2013-10-09

·

Updated

2023-08-15

·

CVE-2013-5513

CVSS v2.0

7.1

High

VectorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 8.2.x through 8.2(5.45) Cisco Adaptive Security Appliance (ASA) Software versions 8.3.x through 8.3(2.38) Cisco Adaptive Security Appliance (ASA) Software versions 8.4.x through 8.4(6) Cisco Adaptive Security Appliance (ASA) Software versions 8.5.x through 8.5(1.17) Cisco Adaptive Security Appliance (ASA) Software versions 8.6.x through 8.6(1.11) Cisco Adaptive Security Appliance (ASA) Software versions 8.7.x through 8.7(1.6) Cisco Adaptive Security Appliance (ASA) Software versions 9.0.x through 9.0(3.2) Cisco Adaptive Security Appliance (ASA) Software versions 9.1.x through 9.1(1.7)
Description The issue allows remote attackers to cause a denial of service (device reload) via crafted TCP DNS packets when the DNS ALPI engine is enabled for TCP.
Recommendations For versions 8.2.x, update to 8.2(5.46) or later. For versions 8.3.x, update to 8.3(2.39) or later. For versions 8.4.x, update to 8.4(7) or later. For versions 8.5.x, update to 8.5(1.18) or later. For versions 8.6.x, update to 8.6(1.12) or later. For versions 8.7.x, update to 8.7(1.7) or later. For versions 9.0.x, update to 9.0(3.3) or later. For versions 9.1.x, update to 9.1(1.8) or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-5513

Affected Products

Cisco Asa