PT-2015-7180 · Cisco · Cisco Asa

Published

2015-10-21

·

Updated

2023-08-15

·

CVE-2015-6326

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) software versions 7.2 and 8.2 through 8.2(5.57) Cisco Adaptive Security Appliance (ASA) software versions 8.3 through 8.4(7.28) Cisco Adaptive Security Appliance (ASA) software versions 8.5 through 8.7(1.16) Cisco Adaptive Security Appliance (ASA) software versions 9.0 through 9.0(4.36) Cisco Adaptive Security Appliance (ASA) software versions 9.1 through 9.1(6.5) Cisco Adaptive Security Appliance (ASA) software versions 9.2 through 9.2(3) Cisco Adaptive Security Appliance (ASA) software versions 9.3 through 9.3(3.4) Cisco Adaptive Security Appliance (ASA) software versions 9.4 through 9.4(1.4)
Description A vulnerability in the DNS code could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service. This issue can be triggered by a crafted DNS response.
Recommendations For versions 7.2, update to version 8.2(5.58) or later. For versions 8.2, update to version 8.2(5.58) or later. For versions 8.3 and 8.4, update to version 8.4(7.29) or later. For versions 8.5 through 8.7, update to version 8.7(1.17) or later. For versions 9.0, update to version 9.0(4.37) or later. For versions 9.1, update to version 9.1(6.6) or later. For versions 9.2, update to version 9.2(4) or later. For versions 9.3, update to version 9.3(3.5) or later. For versions 9.4, update to version 9.4(1.5) or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-6326

Affected Products

Cisco Asa