Cisco Adaptive Security Appliance XML Parser DoS (cisco-sa-20160517-asa-xml)

The Cisco Adaptive Security Appliance ASA Software running on the remote device is affected by a denial of service vulnerability in the XML parser feature due to improper hardening of the XML parser configuration. An authenticated, remote attacker can exploit this, via a specially crafted XML fil...

CVE-2016-1385

CVE-2016-1385 affects Cisco ASA XML parser. The issue arises from insufficient hardening of the XML parser, enabling a remote, authenticated attacker to cause denial of service (instability, memory consumption, or device reload) by sending a crafted XML document. Impact is observed with ASA Softw...

CVE-2016-1385: Improper Restriction of Operations within the Bounds of a Memory Buffer

The XML parser in Cisco Adaptive Security Appliance ASA Software through 9.5.2 allows remote authenticated users to cause a denial of service instability, memory consumption, or device reload by leveraging 1 administrative access or 2 Clientless SSL VPN access to provide a crafted XML document, a...