Lucene search

K
ciscoCiscoCISCO-SA-20190501-SD-CPU-DOS
HistoryMay 01, 2019 - 4:00 p.m.

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability

2019-05-0116:00:00
tools.cisco.com
26

0.002 Low

EPSS

Percentile

52.8%

A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device.

The vulnerability is due to excessive processing load for existing WebVPN login operations. An attacker could exploit this vulnerability by sending multiple WebVPN login requests to the device. A successful exploit could allow the attacker to increase CPU load on the device, resulting in a denial of service (DoS) condition.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-sd-cpu-dos [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-sd-cpu-dos”]

Affected configurations

Vulners
Node
ciscoadaptive_security_virtual_applianceMatch9.0
OR
ciscoadaptive_security_virtual_applianceMatch9.1
OR
ciscoadaptive_security_virtual_applianceMatch9.2
OR
ciscoadaptive_security_virtual_applianceMatch9.3
OR
ciscoadaptive_security_virtual_applianceMatch9.4
OR
ciscoadaptive_security_virtual_applianceMatch9.5
OR
ciscoadaptive_security_virtual_applianceMatch9.6
OR
ciscoadaptive_security_virtual_applianceMatch9.7
OR
ciscoadaptive_security_virtual_applianceMatch9.8
OR
ciscoadaptive_security_virtual_applianceMatch9.9
OR
ciscofirepower_threat_defense_softwareMatch6.0
OR
ciscofirepower_threat_defense_softwareMatch6.1
OR
ciscofirepower_threat_defense_softwareMatch6.2
OR
ciscoadaptive_security_virtual_applianceMatch9.0.1
OR
ciscoadaptive_security_virtual_applianceMatch9.0.2
OR
ciscoadaptive_security_virtual_applianceMatch9.0.2.10
OR
ciscoadaptive_security_virtual_applianceMatch9.0.3
OR
ciscoadaptive_security_virtual_applianceMatch9.0.3.6
OR
ciscoadaptive_security_virtual_applianceMatch9.0.3.8
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.1
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.5
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.17
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.20
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.24
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.7
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.26
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.29
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.33
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.37
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.35
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.40
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.42
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.38
OR
ciscoadaptive_security_virtual_applianceMatch9.0.4.39
OR
ciscoadaptive_security_virtual_applianceMatch9.1.1
OR
ciscoadaptive_security_virtual_applianceMatch9.1.1.4
OR
ciscoadaptive_security_virtual_applianceMatch9.1.2
OR
ciscoadaptive_security_virtual_applianceMatch9.1.3
OR
ciscoadaptive_security_virtual_applianceMatch9.1.2.8
OR
ciscoadaptive_security_virtual_applianceMatch9.1.3.2
OR
ciscoadaptive_security_virtual_applianceMatch9.1.4
OR
ciscoadaptive_security_virtual_applianceMatch9.1.4.5
OR
ciscoadaptive_security_virtual_applianceMatch9.1.5
OR
ciscoadaptive_security_virtual_applianceMatch9.1.5.10
OR
ciscoadaptive_security_virtual_applianceMatch9.1.5.12
OR
ciscoadaptive_security_virtual_applianceMatch9.1.5.15
OR
ciscoadaptive_security_virtual_applianceMatch9.1.6
OR
ciscoadaptive_security_virtual_applianceMatch9.1.5.21
OR
ciscoadaptive_security_virtual_applianceMatch9.1.6.1
OR
ciscoadaptive_security_virtual_applianceMatch9.1.6.6
OR
ciscoadaptive_security_virtual_applianceMatch9.1.6.4
OR
ciscoadaptive_security_virtual_applianceMatch9.1.6.8
OR
ciscoadaptive_security_virtual_applianceMatch9.1.6.10
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.4
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.6
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.7
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.9
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.11
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.12
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.13
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.15
OR
ciscoadaptive_security_virtual_applianceMatch9.1.5.16
OR
ciscoadaptive_security_virtual_applianceMatch9.1.5.19
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.16
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.19
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.20
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.21
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.23
OR
ciscoadaptive_security_virtual_applianceMatch9.1.6.11
OR
ciscoadaptive_security_virtual_applianceMatch9.1.7.25
OR
ciscoadaptive_security_virtual_applianceMatch9.2.1
OR
ciscoadaptive_security_virtual_applianceMatch9.2.2
OR
ciscoadaptive_security_virtual_applianceMatch9.2.2.4
OR
ciscoadaptive_security_virtual_applianceMatch9.2.2.7
OR
ciscoadaptive_security_virtual_applianceMatch9.2.3
OR
ciscoadaptive_security_virtual_applianceMatch9.2.2.8
OR
ciscoadaptive_security_virtual_applianceMatch9.2.3.3
OR
ciscoadaptive_security_virtual_applianceMatch9.2.3.4
OR
ciscoadaptive_security_virtual_applianceMatch9.2.0.0
OR
ciscoadaptive_security_virtual_applianceMatch9.2.0.104
OR
ciscoadaptive_security_virtual_applianceMatch9.2.3.1
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.2
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.4
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.8
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.10
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.13
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.14
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.16
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.17
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.18
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.19
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.5
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.20
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.22
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.24
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.25
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.27
OR
ciscoadaptive_security_virtual_applianceMatch9.2.4.28
OR
ciscoadaptive_security_virtual_applianceMatch9.3.1
OR
ciscoadaptive_security_virtual_applianceMatch9.3.1.1
OR
ciscoadaptive_security_virtual_applianceMatch9.3.2
OR
ciscoadaptive_security_virtual_applianceMatch9.3.2.2
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3
OR
ciscoadaptive_security_virtual_applianceMatch9.3.5
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3.1
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3.2
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3.5
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3.6
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3.9
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3.10
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3.11
OR
ciscoadaptive_security_virtual_applianceMatch9.3.3.7
OR
ciscoadaptive_security_virtual_applianceMatch9.4.1
OR
ciscoadaptive_security_virtual_applianceMatch9.4.0.115
OR
ciscoadaptive_security_virtual_applianceMatch9.4.1.1
OR
ciscoadaptive_security_virtual_applianceMatch9.4.2
OR
ciscoadaptive_security_virtual_applianceMatch9.4.1.5
OR
ciscoadaptive_security_virtual_applianceMatch9.4.1.3
OR
ciscoadaptive_security_virtual_applianceMatch9.4.1.2
OR
ciscoadaptive_security_virtual_applianceMatch9.4.2.3
OR
ciscoadaptive_security_virtual_applianceMatch9.4.3
OR
ciscoadaptive_security_virtual_applianceMatch9.4.3.3
OR
ciscoadaptive_security_virtual_applianceMatch9.4.3.4
OR
ciscoadaptive_security_virtual_applianceMatch9.4.3.6
OR
ciscoadaptive_security_virtual_applianceMatch9.4.3.8
OR
ciscoadaptive_security_virtual_applianceMatch9.4.3.11
OR
ciscoadaptive_security_virtual_applianceMatch9.4.3.12
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.2
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.5
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.6
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.8
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.10
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.12
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.13
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.14
OR
ciscoadaptive_security_virtual_applianceMatch9.4.2.6
OR
ciscoadaptive_security_virtual_applianceMatch9.4.2.11
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.16
OR
ciscoadaptive_security_virtual_applianceMatch9.4.1.13
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.17
OR
ciscoadaptive_security_virtual_applianceMatch9.4.1.7
OR
ciscoadaptive_security_virtual_applianceMatch9.4.1.8
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.18
OR
ciscoadaptive_security_virtual_applianceMatch9.4.4.20
OR
ciscoadaptive_security_virtual_applianceMatch9.5.1
OR
ciscoadaptive_security_virtual_applianceMatch9.5.2
OR
ciscoadaptive_security_virtual_applianceMatch9.5.2.6
OR
ciscoadaptive_security_virtual_applianceMatch9.5.2.10
OR
ciscoadaptive_security_virtual_applianceMatch9.5.2.14
OR
ciscoadaptive_security_virtual_applianceMatch9.5.3
OR
ciscoadaptive_security_virtual_applianceMatch9.5.3.2
OR
ciscoadaptive_security_virtual_applianceMatch9.5.3.3
OR
ciscoadaptive_security_virtual_applianceMatch9.5.3.1
OR
ciscoadaptive_security_virtual_applianceMatch9.5.3.6
OR
ciscoadaptive_security_virtual_applianceMatch9.5.3.9
OR
ciscoadaptive_security_virtual_applianceMatch9.5.2.5
OR
ciscoadaptive_security_virtual_applianceMatch9.5.2.2
OR
ciscoadaptive_security_virtual_applianceMatch9.5.1.4
OR
ciscoadaptive_security_virtual_applianceMatch9.6.0
OR
ciscoadaptive_security_virtual_applianceMatch9.6.1
OR
ciscoadaptive_security_virtual_applianceMatch9.6.1.3
OR
ciscoadaptive_security_virtual_applianceMatch9.6.1.5
OR
ciscoadaptive_security_virtual_applianceMatch9.6.1.10
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.1
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.2
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.3
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.7
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.8
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.9
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.1
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.11
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.3
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.8
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.9
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.11
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.12
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.14
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.17
OR
ciscoadaptive_security_virtual_applianceMatch9.63.20
OR
ciscoadaptive_security_virtual_applianceMatch9.62.22
OR
ciscoadaptive_security_virtual_applianceMatch9.62.23
OR
ciscoadaptive_security_virtual_applianceMatch9.6.4.3
OR
ciscoadaptive_security_virtual_applianceMatch9.6.3.20
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.22
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.23
OR
ciscoadaptive_security_virtual_applianceMatch9.6.4
OR
ciscoadaptive_security_virtual_applianceMatch9.6.2.13
OR
ciscoadaptive_security_virtual_applianceMatch9.6.4.5
OR
ciscoadaptive_security_virtual_applianceMatch9.6.4.6
OR
ciscoadaptive_security_virtual_applianceMatch9.6.4.8
OR
ciscoadaptive_security_virtual_applianceMatch9.6.4.10
OR
ciscoadaptive_security_virtual_applianceMatch9.6.4.12
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.1
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.2
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.4
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.8
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.15
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.16
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.19
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.20
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.21
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.23
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.24
OR
ciscoadaptive_security_virtual_applianceMatch9.7.1.28
OR
ciscoadaptive_security_virtual_applianceMatch9.8.1
OR
ciscoadaptive_security_virtual_applianceMatch9.8.1.5
OR
ciscoadaptive_security_virtual_applianceMatch9.8.1.7
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.8
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.10
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.11
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.14
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.15
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.17
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.18
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.19
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.20
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.3
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.24
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.26
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.28
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.33
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.35
OR
ciscoadaptive_security_virtual_applianceMatch9.8.2.38
OR
ciscoadaptive_security_virtual_applianceMatch9.8.3
OR
ciscoadaptive_security_virtual_applianceMatchany
OR
ciscoadaptive_security_virtual_applianceMatch9.9.1
OR
ciscoadaptive_security_virtual_applianceMatch9.9.1.2
OR
ciscoadaptive_security_virtual_applianceMatch9.9.1.3
OR
ciscoadaptive_security_virtual_applianceMatch9.9.2
OR
ciscoadaptive_security_virtual_applianceMatch9.9.2.1
OR
ciscoadaptive_security_virtual_applianceMatch9.9.1.4
OR
ciscoadaptive_security_virtual_applianceMatch9.9.2.9
OR
ciscoadaptive_security_virtual_applianceMatch9.9.2.14
OR
ciscofirepower_threat_defense_softwareMatch6.0.0
OR
ciscofirepower_threat_defense_softwareMatch6.0.1
OR
ciscofirepower_threat_defense_softwareMatch6.0.1.3
OR
ciscofirepower_threat_defense_softwareMatch6.0.1.1
OR
ciscofirepower_threat_defense_softwareMatch6.0.1.2
OR
ciscofirepower_threat_defense_softwareMatch6.0.1.4
OR
ciscofirepower_threat_defense_softwareMatch6.1.0
OR
ciscofirepower_threat_defense_softwareMatch6.1.0.2
OR
ciscofirepower_threat_defense_softwareMatch6.1.0.1
OR
ciscofirepower_threat_defense_softwareMatch6.1.0.3
OR
ciscofirepower_threat_defense_softwareMatch6.1.0.4
OR
ciscofirepower_threat_defense_softwareMatch6.1.0.5
OR
ciscofirepower_threat_defense_softwareMatch6.1.0.6
OR
ciscofirepower_threat_defense_softwareMatch6.1.0.7
OR
ciscofirepower_threat_defense_softwareMatch6.2.0
OR
ciscofirepower_threat_defense_softwareMatch6.2.1
OR
ciscofirepower_threat_defense_softwareMatch6.2.2
OR
ciscofirepower_threat_defense_softwareMatch6.2.0.1
OR
ciscofirepower_threat_defense_softwareMatch6.2.0.2
OR
ciscofirepower_threat_defense_softwareMatch6.2.0.3
OR
ciscofirepower_threat_defense_softwareMatch6.2.0.4
OR
ciscofirepower_threat_defense_softwareMatch6.2.2.1
OR
ciscofirepower_threat_defense_softwareMatch6.2.2.2
OR
ciscofirepower_threat_defense_softwareMatch6.2.3
OR
ciscofirepower_threat_defense_softwareMatch6.2.3.1
OR
ciscofirepower_threat_defense_softwareMatch6.2.3.2
OR
ciscofirepower_threat_defense_softwareMatch6.2.3.3
OR
ciscofirepower_threat_defense_softwareMatch6.2.3.4
OR
ciscofirepower_threat_defense_softwareMatch6.2.2.3
OR
ciscofirepower_threat_defense_softwareMatch6.2.2.4
OR
ciscofirepower_threat_defense_softwareMatch6.2.0.5
OR
ciscofirepower_threat_defense_softwareMatch6.2.0.6
OR
ciscofirepower_threat_defense_softwareMatch6.2.0.7

0.002 Low

EPSS

Percentile

52.8%

Related for CISCO-SA-20190501-SD-CPU-DOS