Lucene search
PRIOn knowledge basePRION:CVE-2014-3407HistoryNov 28, 2014 - 2:59 a.m.
Design/Logic Flaw
2014-11-2802:59:00
PRIOn knowledge base
www.prio-n.com
5
7.1 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
61.1%
The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCuq68888.
| CPE | Name | Operator | Version |
|---|---|---|---|
| adaptive_security_appliance_software | eq | <= 9.32 |
Related
nessus
nessus
Cisco ASA SSL VPN Memory Blocks Exhaustion DoS (CSCuq68888)
2014-12-08 00:00:00
Fedora 20 : drupal7-7.32-1.fc20 (2014-13030)
2014-10-29 00:00:00
cisco
cisco
Cisco ASA Software SSL VPN Memory Blocks Exhaustion Vulnerability
2014-11-26 18:44:32
cve
cve
CVE-2014-3407
2014-11-28 02:59:00
openvas
openvas
Fedora Update for drupal7 FEDORA-2014-13030
2014-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: drupal7-7.32-1.fc20
2014-10-28 06:48:09
7.1 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
61.1%
Related for PRION:CVE-2014-3407