Lucene search

[email protected]CVE-2016-1383

HistoryMay 25, 2016 - 1:59 a.m.

CVE-2016-1383

2016-05-2501:59:07

CWE-399

[email protected]

web.nvd.nist.gov

cve-2016-1383

cisco

asyncos

wsa

denial of service

memory leak

bug id cscur28305

nvd

security vulnerability

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

JSON

Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via an unspecified HTTP status code, aka Bug ID CSCur28305.

Affected configurations

NVD

Node

ciscoweb_security_applianceMatch-

AND

ciscoweb_security_appliance_\(wsa\)Match5.6.0-623

ciscoweb_security_appliance_\(wsa\)Match6.0.0-000

ciscoweb_security_appliance_\(wsa\)Match7.1.0

ciscoweb_security_appliance_\(wsa\)Match7.1.1

ciscoweb_security_appliance_\(wsa\)Match7.1.2

ciscoweb_security_appliance_\(wsa\)Match7.1.3

ciscoweb_security_appliance_\(wsa\)Match7.1.4

ciscoweb_security_appliance_\(wsa\)Match7.5.0-000

ciscoweb_security_appliance_\(wsa\)Match7.5.0-825

ciscoweb_security_appliance_\(wsa\)Match7.5.1-000

ciscoweb_security_appliance_\(wsa\)Match7.5.2-000

ciscoweb_security_appliance_\(wsa\)Match7.7.0-000

ciscoweb_security_appliance_\(wsa\)Match7.7.1-000

ciscoweb_security_appliance_\(wsa\)Match8.0.0-000

ciscoweb_security_appliance_\(wsa\)Match8.0.5

ciscoweb_security_appliance_\(wsa\)Match8.0.6

ciscoweb_security_appliance_\(wsa\)Match8.0.6-078

ciscoweb_security_appliance_\(wsa\)Match8.0.6-119

ciscoweb_security_appliance_\(wsa\)Match8.0.7

ciscoweb_security_appliance_\(wsa\)Match8.0.7-142

ciscoweb_security_appliance_\(wsa\)Match8.0.8-mr-113

ciscoweb_security_appliance_\(wsa\)Match8.5.0-497

ciscoweb_security_appliance_\(wsa\)Match8.5.0.000

ciscoweb_security_appliance_\(wsa\)Match8.5.1-021

ciscoweb_security_appliance_\(wsa\)Match8.5.2-024

ciscoweb_security_appliance_\(wsa\)Match8.5.2-027

ciscoweb_security_appliance_\(wsa\)Match8.5.3-055

CPENameOperatorVersion
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq5.6.0-623
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq6.0.0-000
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq7.1.0
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq7.1.1
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq7.1.2
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq7.1.3
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq7.1.4
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq7.5.0-000
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq7.5.0-825
cisco:web_security_appliance_\(wsa\)cisco web security appliance (wsa)eq7.5.1-000

CPE	Name	Operator	Version
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	5.6.0-623
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	6.0.0-000
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	7.1.0
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	7.1.1
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	7.1.2
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	7.1.3
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	7.1.4
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	7.5.0-000
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	7.5.0-825
cisco:web_security_appliance_\(wsa\)	cisco web security appliance (wsa)	eq	7.5.1-000

Rows per page:

1-10 of 271

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160518-wsa4

www.securitytracker.com/id/1035911

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

JSON

Related for CVE-2016-1383

cisco1 cvelist1 nvd1 prion1 openvas1 nessus1