CVE-2015-0619

Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and SSL outage via multiple crafted HTTP requests, aka Bug ID CSCue05458...

Memory corruption

Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and SSL outage via multiple crafted HTTP requests, aka Bug ID CSCue05458...

CVE-2015-0619

Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and SSL outage via multiple crafted HTTP requests, aka Bug ID CSCue05458...

CVE-2015-0619

CVE-2015-0619 affects Cisco ASA devices where the WebVPN embedded web server leaks memory in response to crafted HTTP requests, enabling a remote, unauthenticated attacker to trigger denial of service (memory consumption and SSL outage). The issue stems from a memory leak in the WebVPN component ...

Cisco Adaptive Security Appliance (ASA) Software Denial of Service Vulnerability (CNVD-2015-00992)

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A denial-of-service vulnerability exists in the Cisco Adaptive Security Appliance ASA Software, which can be exploited by an attacker to cause an affected appliance to cras...

CVE-2013-5557

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software 9.1.2 and earlier allows remote authenticated users to cause a denial of service device crash or error-recovery event via an HTTP request that triggers a rewrite, aka Bug ID...

Design/Logic Flaw

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software 9.1.2 and earlier allows remote authenticated users to cause a denial of service device crash or error-recovery event via an HTTP request that triggers a rewrite, aka Bug ID...

CVE-2013-5557

Cisco ASA WebVPN: The Proxy Bypass Content Rewriter in WebVPN (9.1.x and earlier) contains a fault in the Proxy Bypass Content Rewriter implementation that could be exploited by an authenticated remote attacker via an HTTP request to trigger a rewrite, causing a denial of service (device crash or...

CVE-2013-5557

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software 9.1.2 and earlier allows remote authenticated users to cause a denial of service device crash or error-recovery event via an HTTP request that triggers a rewrite, aka Bug ID...

Cisco Adaptive Security Appliance WebVPN Content Rewriter Denial of Service Vulnerability

A vulnerability in the WebVPN functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to cause an affected device to crash. The vulnerability is due to a fault in the Proxy Bypass Content Rewriter implementation. An attacker could exploit this...

Cisco ASA Software Version Information Disclosure Vulnerability (Cisco-SA-20141006) - Active Check

Cisco ASA Software is prone to an information-disclosure vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Cisco Adaptive Security Appliance DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCP relay function of Cisco Adaptive Security Appliance ASA software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device. The vulnerability is due to insufficient validation of crafted DHCP packets. Cisco ASA Software is affected by th...

Cisco ASA Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCPv6 relay feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 packets. Cisco ASA Software is affected by this...

Code injection

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

CVE-2015-0578

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

CVE-2015-0578

CVE-2015-0578 affects Cisco ASA software when DHCPv6 relay is enabled. A remote, unauthenticated attacker can craft DHCPv6 packets in the same broadcast domain to trigger a device reload due to insufficient validation of DHCPv6 packets. The issue specifically impacts ASA releases configured with ...

Cisco Adaptive Security Appliance Software Information Leak in Syslog Messages Vulnerability

A vulnerability in the syslog management subsystem of devices running Cisco Adaptive Security Appliance ASA Software may allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper sanitization of syslog messages. An attacker could exploit this...

CVE-2014-3410

The syslog-management subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then 1 sniffing the network for a syslog message or 2 reading a syslog message in a file on a syslog...

Design/Logic Flaw

The syslog-management subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then 1 sniffing the network for a syslog message or 2 reading a syslog message in a file on a syslog...

CVE-2014-3410

The syslog-management subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then 1 sniffing the network for a syslog message or 2 reading a syslog message in a file on a syslog...