CVE-2014-0653

The Cisco ASA Identity Firewall (IDFW) NetBIOS logout probe vulnerability (CVE-2014-0653) stems from insufficient validation of NetBIOS probe responses, allowing an unauthenticated remote attacker to modify a user’s authentication state. Cisco notes the issue in Cisco-SA-20140108-CVE-2014-0653 an...

PT-2014-3750

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software affected versions not specified Description The issue concerns the Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software. It allows remote attackers to modify the...

CVE-2014-0653: Improper Input Validation

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340...

CVE-2013-6707

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier allows remote attackers to cause a denial of service multi-protocol management outage by making multiple management session requests, aka Bug ID CSCug33233...

Memory corruption

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier allows remote attackers to cause a denial of service multi-protocol management outage by making multiple management session requests, aka Bug ID CSCug33233...

CVE-2013-6707

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier allows remote attackers to cause a denial of service multi-protocol management outage by making multiple management session requests, aka Bug ID CSCug33233...

CVE-2013-6707: Missing Release of Resource after Effective Lifetime

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier allows remote attackers to cause a denial of service multi-protocol management outage by making multiple management session requests, aka Bug ID CSCug33233...

CVE-2013-6696

Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...

Cisco Adaptive Security Appliance Malformed DNS Reply Denial of Service Vulnerability

A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. The vulnerability is due to improper handling of DNS error cases when the Cisco ASA Software receives a DNS reply packet under a particular system...

CVE-2013-6696: Improper Input Validation

Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...

Code injection

The IPv6 implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCue34342...

Design/Logic Flaw

The phone-proxy implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service connection-database corruption via an invalid entry, aka Bug ID CSCui33299...

CVE-2013-6682

The phone-proxy implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service connection-database corruption via an invalid entry, aka Bug ID CSCui33299...

CVE-2013-6682

The vulnerability CVE-2013-6682 affects Cisco ASA devices with the phone-proxy feature (ASA Software 9.0.3.6 and earlier). The root cause is improper validation of X.509 certificates in the phone-proxy, enabling an unauthenticated, remote attacker to temporarily insert an invalid entry in the pho...

CVE-2013-5560: Improper Input Validation

The IPv6 implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCue34342...

CVE-2013-5568: Improper Input Validation

The auto-update implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service device reload via crafted update data, aka Bug ID CSCui33308...

Cisco Adaptive Security Appliance IPv6 NAT Denial of Service Vulnerability

A vulnerability in the function that performs IP version 6 IPv6 Network Address Translation NAT for Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to improper implementation of the logic that performs NAT when t...

Stack overflow

Cisco Adaptive Security Appliance ASA Software, when certain same-security-traffic and management-access options are enabled, allows remote authenticated users to cause a denial of service stack overflow and device reload by using the clientless SSL VPN portal for internal-resource browsing, aka...

CVE-2013-5551

Cisco Adaptive Security Appliance ASA Software, when certain same-security-traffic and management-access options are enabled, allows remote authenticated users to cause a denial of service stack overflow and device reload by using the clientless SSL VPN portal for internal-resource browsing, aka...

CVE-2013-5551: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Adaptive Security Appliance ASA Software, when certain same-security-traffic and management-access options are enabled, allows remote authenticated users to cause a denial of service stack overflow and device reload by using the clientless SSL VPN portal for internal-resource browsing, aka...