Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-0676
HistoryApr 13, 2015 - 1:59 a.m.

Design/Logic Flaw

2015-04-1301:59:00
PRIOn knowledge base
www.prio-n.com
2

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before 8.5(1.24), 8.6 before 8.6(1.17), 8.7 before 8.7(1.16), 9.0 before 9.0(4.33), 9.1 before 9.1(6.1), 9.2 before 9.2(3.4), and 9.3 before 9.3(3) allows man-in-the-middle attackers to cause a denial of service (memory consumption or device outage) by triggering outbound DNS queries and then sending crafted responses to these queries, aka Bug ID CSCuq77655.

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%