CVE-2014-2129

2014-04-1004:34:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

asa

software

sip

inspection

engine

dos

vulnerability

cve-2014-2129

nvd

7.7 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

56.0%

JSON

The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted SIP packets, aka Bug ID CSCuh44052.

CPENameOperatorVersion
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.2
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq8.4
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq9.0
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq9.1

CPE	Name	Operator	Version
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.2
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	8.4
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	9.0
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	9.1