Design/Logic Flaw

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.31, 8.1 and 8.2 before 8.25.38, 8.3 before 8.32.37, 8.4 before 8.45, 8.5 before 8.51.17, 8.6 before 8.61.10, and 8.7 before 8.71.3 allow remote attackers to cause a denial of service device reload via...

CVE-2013-1151

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.31, 8.1 and 8.2 before 8.25.38, 8.3 before 8.32.37, 8.4 before 8.45, 8.5 before 8.51.17, 8.6 before 8.61.10, and 8.7 before 8.71.3 allow remote attackers to cause a denial of service device reload via...

CVE-2013-1150

The authentication-proxy implementation on Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.31, 8.1 and 8.2 before 8.25.38, 8.3 before 8.32.37, 8.4 before 8.45.3, 8.5 and 8.6 before 8.61.10, 8.7 before 8.71.4, 9.0 before 9.01.1, and 9.1 before 9.11....

CVE-2013-1150

CVE-2013-1150 affects Cisco ASA/ASA-enabled devices via the authentication-proxy component. The DoS flaw allows remote attackers to trigger a device reload with a crafted URL, impacting ASA software versions across multiple trainings: 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1–8.2 before 8.2...

CVE-2013-1151

Cisco ASA devices running software versions listed below are vulnerable to a denial of service (device reload) caused by processing a crafted certificate (Bug ID CSCuc72408, CVE-2013-1151). Affected: ASA 7.x prior to 7.2(5.10); 8.0 prior to 8.0(5.31); 8.1–8.2 prior to 8.2(5.38); 8.3 prior to 8.3(...

CVE-2013-1149

CVE-2013-1149 affects Cisco ASA and FWSM: remote attackers can cause a denial of service (device reload) by sending a crafted IKEv1 message. Affected software ranges include ASA 7.x up to 7.2(5.10), 8.0 up to 8.0(5.28), 8.1/8.2 up to 8.2(5.35), 8.3 up to 8.3(2.34), 8.4 up to 8.4(4.11), 8.6 up to ...

CVE-2013-1152

CVE-2013-1152 affects Cisco ASA devices running software 9.0 before 9.0(1.2). A crafted field in a DNS message can trigger a denial-of-service, causing a device reload. Mitigation: upgrade to ASA 9.0(1.2) or later (see Cisco advisory). The issue is specific to the DNS inspection/vector handling d...

CVE-2013-1152

Cisco Adaptive Security Appliances ASA devices with software 9.0 before 9.01.2 allow remote attackers to cause a denial of service device reload via a crafted field in a DNS message, aka Bug ID CSCuc80080...

CVE-2013-1149

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.28, 8.1 and 8.2 before 8.25.35, 8.3 before 8.32.34, 8.4 before 8.44.11, 8.6 before 8.61.10, and 8.7 before 8.71.3, and Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.224.1 and 4.0 a...

Cisco ASA Multiple Vulnerabilities (cisco-sa-20130410-asa)

The remote host Cisco ASA 5500 series or 1000V Cloud Firewall is missing a security patch. It, therefore, could be affected by the following issues : - An unspecified vulnerability in the IKE version 1 implementation. CVE-2013-1149 - An unspecified vulnerability in the URL processing code of the...

Multiple Vulnerabilities in Cisco ASA Software

Cisco ASA Software is affected by the following vulnerabilities: IKE Version 1 Denial of Service Vulnerability Crafted URL Denial of Service Vulnerability Denial of Service During Validation of Crafted Certificates DNS Inspection Denial of Service Vulnerability These vulnerabilities are independe...

PT-2013-2920 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices with software 9.0 before 9.01.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a crafted field in a DNS message...

[360-FAAR v0.4.1] Firewall Analysis Audit And Repair

360-FAAR Firewall Analysis Audit and Repair is an offline, command line, Perl firewall policy manipulation tool to filter, compare to logs, merge, translate and output firewall commands for new policies, in Checkpoint dbedit, Cisco ASA or ScreenOS commands, and its one file! Changes: This release...

CVE-2013-1138

The NAT process on Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service connections-table memory consumption via crafted packets, aka Bug ID CSCue46386...

Code injection

The NAT process on Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service connections-table memory consumption via crafted packets, aka Bug ID CSCue46386...

CVE-2013-1138

The NAT process on Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service connections-table memory consumption via crafted packets, aka Bug ID CSCue46386...

CVE-2013-1138

CVE-2013-1138 concerns Cisco ASA devices where the NAT process can be abused by unauthenticated, remote attackers sending crafted packets to exhaust the connections-table memory, causing a DoS. The vulnerability (Bug ID CSCue46386) affects Cisco ASA software and is described as a NAT handling fla...

PT-2013-2908 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue allows remote attackers to cause a denial of service condition due to connections-table memory consumption via crafted packets. This could b...

Cisco ASA 5500 Series SSH Timeout DoS

The remote Cisco ASA is missing a security patch and may be affected by a denial of service vulnerability. Due to a flaw in the management of remote SSH sessions, multiple login sessions can cause the ASA to crash. A remote, authenticated attacker could exploit this to cause a denial of service. ...

Cisco ASA 1000V H.323 Inspection DoS

According to its self-reported model and version number, the remote Cisco ASA 1000V may be affected by a denial of service vulnerability. When H.323 inspection is enabled, processing malformed H.323 transit traffic can result in a device reload. A remote, unauthenticated attacker could exploit th...