PT-2018-1303 · Cisco · Firepower Threat Defense+1

Published 2018-04-18 · Updated 2023-08-15 · CVE-2018-0228

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the ingress flow creation functionality could allow an unauthenticated, remote attacker to cause the CPU to increase upwards of 100% utilization, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to incorrect handling of an internal software lock that could prevent other system processes from getting CPU cycles, causing a high CPU condition. An attacker could exploit this vulnerability by sending a steady stream of malicious IP packets that can cause connections to be created on the targeted device. This vulnerability applies to either IPv4 or IPv6 ingress traffic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Improper Locking

Weakness Enumeration

CWE-20

CWE-667

CWE-399

Related Identifiers

BDU:2018-00801

CVE-2018-0228

Affected Products

Cisco Asa

Firepower Threat Defense

References · 8

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00801 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0228 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0228 · Security Note
• http://securitytracker.com/id/1040724 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01 · Note
• http://securityfocus.com/bid/104220 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-18-184-01 · Note