PT-2017-10001 · Cisco · Cisco Asa

Published 2017-02-01 · Updated 2019-10-09 · CVE-2016-9225

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security module (affected versions not specified)

Description A vulnerability in the data plane IP fragment handler could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition by sending crafted fragmented IP traffic. The issue is due to improper handling of IP fragments, which can lead to the exhaustion of free packet buffers in shared memory, preventing the module from processing further traffic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-9225

Affected Products

Cisco Asa

References · 5

• https://osv.dev/vulnerability/CVE-2016-9225 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9225 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170125-cas · Vendor Advisory
• http://securityfocus.com/bid/95788 · Note
• http://securitytracker.com/id/1037696 · Note