Memory corruption

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20140409-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - An issue exists in the Adaptive Security Device Manager ADSM due to improper privilege assignment to users with a privilege level of zero. This issue allows an authenticated, remote attacker to gain...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

Code injection

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

PT-2014-1323 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.48 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.46.5 Cisco Adaptive Security Appliance ASA Software versions 9.0 before 9.03.1 Cisco Adaptive...

Cisco IOS Software Zone-Based Policy Firewall Session Initiation Protocol Inspection Denial of Service Vulnerability (cisco-sa-20130327-cce)

Cisco IOS Software contains a memory leak vulnerability that could be triggered through the processing of malformed Session Initiation Protocol SIP messages. Exploitation of this vulnerability could cause an interruption of services. Only devices that are configured for SIP inspection are affecte...

Cisco IOS Software Zone-Based Policy Firewall Session Initiation Protocol Inspection Denial of Service Vulnerability

Cisco IOS Software contains a memory leak vulnerability that could be triggered through the processing of malformed Session Initiation Protocol SIP messages. Exploitation of this vulnerability could cause an interruption of services. Only devices that are configured for SIP inspection are affecte...

Design/Logic Flaw

The SIP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.17, 8.3 before 8.32.28, 8.4 before 8.42.13, 8.5 before 8.51.4, and 8.6 before 8.61.5 allows remote...

Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

Cisco ASA 5500 Series Adaptive Security Appliances ASA and Cisco Catalyst 6500 Series ASA Services Module ASASM may be affected by the following vulnerabilities: DHCP Memory Allocation Denial of Service Vulnerability SSL VPN Authentication Denial of Service Vulnerability SIP Inspection Media Upda...

Code injection

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service CPU consumption via crafted SIP traffic, aka Bug ID...

CVE-2012-2472

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service CPU consumption via crafted SIP traffic, aka Bug ID...

CVE-2012-2472

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service CPU consumption via crafted SIP traffic, aka Bug ID...

CVE-2012-1315

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

CVE-2012-1315

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

Cisco ASA 5500 Series Multiple DoS Vulnerabilities (cisco-sa-20100804-asa)

The remote Cisco ASA is missing a security patch and may be vulnerable to the following issues : - Multiple DoS vulnerabilities in the SunRPC inspection engine that can be triggered by sending unspecified UDP packets. CVE-2010-1578, CVE-2010-1579, CVE-2010-1580 - Multiple TLS DoS vulnerabilities...

CVE-2010-4688

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

Information disclosure

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 allows remote attackers to cause a denial of service device crash by making many SIP calls, aka Bug ID CSCte20030...

PT-2011-1643 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.32 Description: The issue is related to an unspecified vulnerability in the SIP inspection feature, which allows remote attackers to cause a denial of service by...

Information disclosure

Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710...