Lucene search
HistoryApr 13, 2015 - 1:59 a.m.
CVE-2015-0676
cisco
asa
software
dns
implementation
vulnerability
cve-2015-0676
cscuq77655
denial of service
memory consumption
device outage
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.3%
The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before 8.5(1.24), 8.6 before 8.6(1.17), 8.7 before 8.7(1.16), 9.0 before 9.0(4.33), 9.1 before 9.1(6.1), 9.2 before 9.2(3.4), and 9.3 before 9.3(3) allows man-in-the-middle attackers to cause a denial of service (memory consumption or device outage) by triggering outbound DNS queries and then sending crafted responses to these queries, aka Bug ID CSCuq77655.
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch7.0.1
ORciscoadaptive_security_appliance_softwareMatch7.0.1.4
ORciscoadaptive_security_appliance_softwareMatch7.0.2
ORciscoadaptive_security_appliance_softwareMatch7.0.3
ORciscoadaptive_security_appliance_softwareMatch7.0.4
ORciscoadaptive_security_appliance_softwareMatch7.0.4.2
ORciscoadaptive_security_appliance_softwareMatch7.0.5
ORciscoadaptive_security_appliance_softwareMatch7.0.5.12
ORciscoadaptive_security_appliance_softwareMatch7.0.6
ORciscoadaptive_security_appliance_softwareMatch7.0.6.4
ORciscoadaptive_security_appliance_softwareMatch7.0.6.8
ORciscoadaptive_security_appliance_softwareMatch7.0.6.18
ORciscoadaptive_security_appliance_softwareMatch7.0.6.22
ORciscoadaptive_security_appliance_softwareMatch7.0.6.26
ORciscoadaptive_security_appliance_softwareMatch7.0.6.29
ORciscoadaptive_security_appliance_softwareMatch7.0.6.32
ORciscoadaptive_security_appliance_softwareMatch7.0.7
ORciscoadaptive_security_appliance_softwareMatch7.0.7.1
ORciscoadaptive_security_appliance_softwareMatch7.0.7.4
ORciscoadaptive_security_appliance_softwareMatch7.0.7.9
ORciscoadaptive_security_appliance_softwareMatch7.0.7.12
ORciscoadaptive_security_appliance_softwareMatch7.0.8
ORciscoadaptive_security_appliance_softwareMatch7.0.8.2
ORciscoadaptive_security_appliance_softwareMatch7.0.8.8
ORciscoadaptive_security_appliance_softwareMatch7.0.8.12
ORciscoadaptive_security_appliance_softwareMatch7.0.8.13
ORciscoadaptive_security_appliance_softwareMatch7.1.2
ORciscoadaptive_security_appliance_softwareMatch7.1.2.16
ORciscoadaptive_security_appliance_softwareMatch7.1.2.20
ORciscoadaptive_security_appliance_softwareMatch7.1.2.24
ORciscoadaptive_security_appliance_softwareMatch7.1.2.28
ORciscoadaptive_security_appliance_softwareMatch7.1.2.38
ORciscoadaptive_security_appliance_softwareMatch7.1.2.42
ORciscoadaptive_security_appliance_softwareMatch7.1.2.46
ORciscoadaptive_security_appliance_softwareMatch7.1.2.49
ORciscoadaptive_security_appliance_softwareMatch7.1.2.53
ORciscoadaptive_security_appliance_softwareMatch7.1.2.61
ORciscoadaptive_security_appliance_softwareMatch7.1.2.64
ORciscoadaptive_security_appliance_softwareMatch7.1.2.72
ORciscoadaptive_security_appliance_softwareMatch7.1.2.81
ORciscoadaptive_security_appliance_softwareMatch7.2.1
ORciscoadaptive_security_appliance_softwareMatch7.2.1.9
ORciscoadaptive_security_appliance_softwareMatch7.2.1.13
ORciscoadaptive_security_appliance_softwareMatch7.2.1.19
ORciscoadaptive_security_appliance_softwareMatch7.2.1.24
ORciscoadaptive_security_appliance_softwareMatch7.2.2
ORciscoadaptive_security_appliance_softwareMatch7.2.2.6
ORciscoadaptive_security_appliance_softwareMatch7.2.2.10
ORciscoadaptive_security_appliance_softwareMatch7.2.2.14
ORciscoadaptive_security_appliance_softwareMatch7.2.2.18
ORciscoadaptive_security_appliance_softwareMatch7.2.2.19
ORciscoadaptive_security_appliance_softwareMatch7.2.2.22
ORciscoadaptive_security_appliance_softwareMatch7.2.2.34
ORciscoadaptive_security_appliance_softwareMatch7.2.3
ORciscoadaptive_security_appliance_softwareMatch7.2.3.1
ORciscoadaptive_security_appliance_softwareMatch7.2.3.12
ORciscoadaptive_security_appliance_softwareMatch7.2.3.16
ORciscoadaptive_security_appliance_softwareMatch7.2.4
ORciscoadaptive_security_appliance_softwareMatch7.2.4.6
ORciscoadaptive_security_appliance_softwareMatch7.2.4.9
ORciscoadaptive_security_appliance_softwareMatch7.2.4.18
ORciscoadaptive_security_appliance_softwareMatch7.2.4.25
ORciscoadaptive_security_appliance_softwareMatch7.2.4.27
ORciscoadaptive_security_appliance_softwareMatch7.2.4.30
ORciscoadaptive_security_appliance_softwareMatch7.2.4.33
ORciscoadaptive_security_appliance_softwareMatch7.2.5
ORciscoadaptive_security_appliance_softwareMatch7.2.5.2
ORciscoadaptive_security_appliance_softwareMatch7.2.5.4
ORciscoadaptive_security_appliance_softwareMatch7.2.5.7
ORciscoadaptive_security_appliance_softwareMatch7.2.5.8
ORciscoadaptive_security_appliance_softwareMatch7.2.5.10
ORciscoadaptive_security_appliance_softwareMatch7.2.5.12
ORciscoadaptive_security_appliance_softwareMatch8.0.1.2
ORciscoadaptive_security_appliance_softwareMatch8.0.2
ORciscoadaptive_security_appliance_softwareMatch8.0.2.11
ORciscoadaptive_security_appliance_softwareMatch8.0.2.15
ORciscoadaptive_security_appliance_softwareMatch8.0.3
ORciscoadaptive_security_appliance_softwareMatch8.0.3.6
ORciscoadaptive_security_appliance_softwareMatch8.0.3.12
ORciscoadaptive_security_appliance_softwareMatch8.0.3.19
ORciscoadaptive_security_appliance_softwareMatch8.0.4
ORciscoadaptive_security_appliance_softwareMatch8.0.4.3
ORciscoadaptive_security_appliance_softwareMatch8.0.4.9
ORciscoadaptive_security_appliance_softwareMatch8.0.4.16
ORciscoadaptive_security_appliance_softwareMatch8.0.4.23
ORciscoadaptive_security_appliance_softwareMatch8.0.4.25
ORciscoadaptive_security_appliance_softwareMatch8.0.4.28
ORciscoadaptive_security_appliance_softwareMatch8.0.4.31
ORciscoadaptive_security_appliance_softwareMatch8.0.4.32
ORciscoadaptive_security_appliance_softwareMatch8.0.4.33
ORciscoadaptive_security_appliance_softwareMatch8.0.5
ORciscoadaptive_security_appliance_softwareMatch8.0.5.20
ORciscoadaptive_security_appliance_softwareMatch8.0.5.23
ORciscoadaptive_security_appliance_softwareMatch8.0.5.25
ORciscoadaptive_security_appliance_softwareMatch8.0.5.27
ORciscoadaptive_security_appliance_softwareMatch8.0.5.28
ORciscoadaptive_security_appliance_softwareMatch8.0.5.31
ORciscoadaptive_security_appliance_softwareMatch8.1.1
ORciscoadaptive_security_appliance_softwareMatch8.1.1.6
ORciscoadaptive_security_appliance_softwareMatch8.1.2
ORciscoadaptive_security_appliance_softwareMatch8.1.2.13
ORciscoadaptive_security_appliance_softwareMatch8.1.2.15
ORciscoadaptive_security_appliance_softwareMatch8.1.2.16
ORciscoadaptive_security_appliance_softwareMatch8.1.2.19
ORciscoadaptive_security_appliance_softwareMatch8.1.2.23
ORciscoadaptive_security_appliance_softwareMatch8.1.2.24
ORciscoadaptive_security_appliance_softwareMatch8.1.2.49
ORciscoadaptive_security_appliance_softwareMatch8.1.2.50
ORciscoadaptive_security_appliance_softwareMatch8.1.2.55
ORciscoadaptive_security_appliance_softwareMatch8.1.2.56
ORciscoadaptive_security_appliance_softwareMatch8.2.0.45
ORciscoadaptive_security_appliance_softwareMatch8.2.1
ORciscoadaptive_security_appliance_softwareMatch8.2.1.11
ORciscoadaptive_security_appliance_softwareMatch8.2.2
ORciscoadaptive_security_appliance_softwareMatch8.2.2.9
ORciscoadaptive_security_appliance_softwareMatch8.2.2.10
ORciscoadaptive_security_appliance_softwareMatch8.2.2.12
ORciscoadaptive_security_appliance_softwareMatch8.2.2.16
ORciscoadaptive_security_appliance_softwareMatch8.2.2.17
ORciscoadaptive_security_appliance_softwareMatch8.2.3
ORciscoadaptive_security_appliance_softwareMatch8.2.4
ORciscoadaptive_security_appliance_softwareMatch8.2.4.1
ORciscoadaptive_security_appliance_softwareMatch8.2.4.4
ORciscoadaptive_security_appliance_softwareMatch8.2.5
ORciscoadaptive_security_appliance_softwareMatch8.2.5.13
ORciscoadaptive_security_appliance_softwareMatch8.2.5.22
ORciscoadaptive_security_appliance_softwareMatch8.2.5.26
ORciscoadaptive_security_appliance_softwareMatch8.2.5.33
ORciscoadaptive_security_appliance_softwareMatch8.2.5.40
ORciscoadaptive_security_appliance_softwareMatch8.2.5.41
ORciscoadaptive_security_appliance_softwareMatch8.2.5.46
ORciscoadaptive_security_appliance_softwareMatch8.2.5.48
ORciscoadaptive_security_appliance_softwareMatch8.2.5.50
ORciscoadaptive_security_appliance_softwareMatch8.2.5.52
ORciscoadaptive_security_appliance_softwareMatch8.2.5.55
ORciscoadaptive_security_appliance_softwareMatch8.2.5.57
ORciscoadaptive_security_appliance_softwareMatch8.3.1
ORciscoadaptive_security_appliance_softwareMatch8.3.1.1
ORciscoadaptive_security_appliance_softwareMatch8.3.1.4
ORciscoadaptive_security_appliance_softwareMatch8.3.1.6
ORciscoadaptive_security_appliance_softwareMatch8.3.2
ORciscoadaptive_security_appliance_softwareMatch8.3.2.4
ORciscoadaptive_security_appliance_softwareMatch8.3.2.13
ORciscoadaptive_security_appliance_softwareMatch8.3.2.23
ORciscoadaptive_security_appliance_softwareMatch8.3.2.25
ORciscoadaptive_security_appliance_softwareMatch8.3.2.31
ORciscoadaptive_security_appliance_softwareMatch8.3.2.33
ORciscoadaptive_security_appliance_softwareMatch8.3.2.34
ORciscoadaptive_security_appliance_softwareMatch8.3.2.37
ORciscoadaptive_security_appliance_softwareMatch8.3.2.39
ORciscoadaptive_security_appliance_softwareMatch8.3.2.40
ORciscoadaptive_security_appliance_softwareMatch8.3.2.41
ORciscoadaptive_security_appliance_softwareMatch8.3.2.44
ORciscoadaptive_security_appliance_softwareMatch8.4.1
ORciscoadaptive_security_appliance_softwareMatch8.4.1.3
ORciscoadaptive_security_appliance_softwareMatch8.4.1.11
ORciscoadaptive_security_appliance_softwareMatch8.4.2
ORciscoadaptive_security_appliance_softwareMatch8.4.2.1
ORciscoadaptive_security_appliance_softwareMatch8.4.2.8
ORciscoadaptive_security_appliance_softwareMatch8.4.3
ORciscoadaptive_security_appliance_softwareMatch8.4.3.8
ORciscoadaptive_security_appliance_softwareMatch8.4.3.9
ORciscoadaptive_security_appliance_softwareMatch8.4.4
ORciscoadaptive_security_appliance_softwareMatch8.4.4.1
ORciscoadaptive_security_appliance_softwareMatch8.4.4.3
ORciscoadaptive_security_appliance_softwareMatch8.4.4.5
ORciscoadaptive_security_appliance_softwareMatch8.4.4.9
ORciscoadaptive_security_appliance_softwareMatch8.4.5
ORciscoadaptive_security_appliance_softwareMatch8.4.5.6
ORciscoadaptive_security_appliance_softwareMatch8.4.6
ORciscoadaptive_security_appliance_softwareMatch8.4.7
ORciscoadaptive_security_appliance_softwareMatch8.4.7.3
ORciscoadaptive_security_appliance_softwareMatch8.4.7.15
ORciscoadaptive_security_appliance_softwareMatch8.4.7.22
ORciscoadaptive_security_appliance_softwareMatch8.4.7.23
ORciscoadaptive_security_appliance_softwareMatch8.4.7.26
ORciscoadaptive_security_appliance_softwareMatch8.5.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1.1
ORciscoadaptive_security_appliance_softwareMatch8.5.1.6
ORciscoadaptive_security_appliance_softwareMatch8.5.1.7
ORciscoadaptive_security_appliance_softwareMatch8.5.1.14
ORciscoadaptive_security_appliance_softwareMatch8.5.1.17
ORciscoadaptive_security_appliance_softwareMatch8.5.1.18
ORciscoadaptive_security_appliance_softwareMatch8.5.1.19
ORciscoadaptive_security_appliance_softwareMatch8.5.1.21
ORciscoadaptive_security_appliance_softwareMatch8.6.1
ORciscoadaptive_security_appliance_softwareMatch8.6.1.1
ORciscoadaptive_security_appliance_softwareMatch8.6.1.2
ORciscoadaptive_security_appliance_softwareMatch8.6.1.5
ORciscoadaptive_security_appliance_softwareMatch8.6.1.10
ORciscoadaptive_security_appliance_softwareMatch8.6.1.12
ORciscoadaptive_security_appliance_softwareMatch8.6.1.13
ORciscoadaptive_security_appliance_softwareMatch8.6.1.14
ORciscoadaptive_security_appliance_softwareMatch8.7.1
ORciscoadaptive_security_appliance_softwareMatch8.7.1.1
ORciscoadaptive_security_appliance_softwareMatch8.7.1.3
ORciscoadaptive_security_appliance_softwareMatch8.7.1.4
ORciscoadaptive_security_appliance_softwareMatch8.7.1.7
ORciscoadaptive_security_appliance_softwareMatch8.7.1.8
ORciscoadaptive_security_appliance_softwareMatch8.7.1.11
ORciscoadaptive_security_appliance_softwareMatch8.7.1.13
ORciscoadaptive_security_appliance_softwareMatch9.0.1
ORciscoadaptive_security_appliance_softwareMatch9.0.2
ORciscoadaptive_security_appliance_softwareMatch9.0.2.10
ORciscoadaptive_security_appliance_softwareMatch9.0.3
ORciscoadaptive_security_appliance_softwareMatch9.0.3.6
ORciscoadaptive_security_appliance_softwareMatch9.0.3.8
ORciscoadaptive_security_appliance_softwareMatch9.0.4
ORciscoadaptive_security_appliance_softwareMatch9.0.4.1
ORciscoadaptive_security_appliance_softwareMatch9.0.4.5
ORciscoadaptive_security_appliance_softwareMatch9.0.4.7
ORciscoadaptive_security_appliance_softwareMatch9.0.4.17
ORciscoadaptive_security_appliance_softwareMatch9.0.4.20
ORciscoadaptive_security_appliance_softwareMatch9.0.4.24
ORciscoadaptive_security_appliance_softwareMatch9.0.4.26
ORciscoadaptive_security_appliance_softwareMatch9.0.4.29
ORciscoadaptive_security_appliance_softwareMatch9.1.1
ORciscoadaptive_security_appliance_softwareMatch9.1.1.4
ORciscoadaptive_security_appliance_softwareMatch9.1.2
ORciscoadaptive_security_appliance_softwareMatch9.1.2.8
ORciscoadaptive_security_appliance_softwareMatch9.1.3
ORciscoadaptive_security_appliance_softwareMatch9.1.3.2
ORciscoadaptive_security_appliance_softwareMatch9.1.4
ORciscoadaptive_security_appliance_softwareMatch9.1.4.5
ORciscoadaptive_security_appliance_softwareMatch9.1.5
ORciscoadaptive_security_appliance_softwareMatch9.1.5.10
ORciscoadaptive_security_appliance_softwareMatch9.1.5.12
ORciscoadaptive_security_appliance_softwareMatch9.1.5.15
ORciscoadaptive_security_appliance_softwareMatch9.1.5.21
ORciscoadaptive_security_appliance_softwareMatch9.1.6
ORciscoadaptive_security_appliance_softwareMatch9.2.1
ORciscoadaptive_security_appliance_softwareMatch9.2.2
ORciscoadaptive_security_appliance_softwareMatch9.2.2.4
ORciscoadaptive_security_appliance_softwareMatch9.2.2.7
ORciscoadaptive_security_appliance_softwareMatch9.2.2.8
ORciscoadaptive_security_appliance_softwareMatch9.2.3
ORciscoadaptive_security_appliance_softwareMatch9.2.3.3
ORciscoadaptive_security_appliance_softwareMatch9.3.1
ORciscoadaptive_security_appliance_softwareMatch9.3.1.1
ORciscoadaptive_security_appliance_softwareMatch9.3.2
ORciscoadaptive_security_appliance_softwareMatch9.3.2.2
Related
cvelist
cvelist
CVE-2015-0676
2015-04-13 01:00:00
prion
prion
Design/Logic Flaw
2015-04-13 01:59:00
nvd
nvd
CVE-2015-0676
2015-04-13 01:59:01
openvas
openvas
Cisco ASA DNS Memory Exhaustion Vulnerability (cisco-sa-20150408-asa)
2015-05-29 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco ASA Software
2015-04-08 16:00:00
nessus
nessus
Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20150408-asa)
2015-04-17 00:00:00
securityvulns
securityvulns
Cisco ASA multiple security vulnerabilities
2015-04-09 00:00:00
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.3%
Related for CVE-2015-0676