PT-2013-6093

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software version 9.1.3 and earlier Description A memory leak in the connection-manager implementation allows remote attackers to cause a denial of service, resulting in a multi-protocol management outage...

PT-2013-6083 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue arises from improper error handling during the processing of DNS responses, allowing remote attackers to cause a denial of service by...

CVE-2013-6696: Improper Input Validation

Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...

Design/Logic Flaw

The auto-update implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service device reload via crafted update data, aka Bug ID CSCui33308...

CVE-2013-5568

The auto-update implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service device reload via crafted update data, aka Bug ID CSCui33308...

CVE-2013-6682

The vulnerability CVE-2013-6682 affects Cisco ASA devices with the phone-proxy feature (ASA Software 9.0.3.6 and earlier). The root cause is improper validation of X.509 certificates in the phone-proxy, enabling an unauthenticated, remote attacker to temporarily insert an invalid entry in the pho...

CVE-2013-5560

The IPv6 implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCue34342...

CVE-2013-5560: Improper Input Validation

The IPv6 implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCue34342...

CVE-2013-6682: Improper Input Validation

The phone-proxy implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service connection-database corruption via an invalid entry, aka Bug ID CSCui33299...

CVE-2013-5568: Improper Input Validation

The auto-update implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service device reload via crafted update data, aka Bug ID CSCui33308...

Cisco Adaptive Security Appliance IPv6 NAT Denial of Service Vulnerability

A vulnerability in the function that performs IP version 6 IPv6 Network Address Translation NAT for Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of an affected system. The vulnerability is due to improper implementation of the logic that performs NAT when t...

PT-2013-5647 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.0.3.6 and earlier Description: The issue is related to the auto-update implementation, allowing remote attackers to cause a denial of service, resulting in a device reload, via crafted...

PT-2013-5640 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.1.3 and earlier Description: The issue is related to the IPv6 implementation in Cisco ASA Software, specifically when NAT64 or NAT66 is enabled. It does not properly process NAT rules,...

PT-2013-6071 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.0.3.6 and earlier Description: The phone-proxy implementation in Cisco Adaptive Security Appliance ASA Software does not properly validate X.509 certificates, allowing remote attackers...

CVE-2013-5561

The Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended policy restrictions via unspecified vectors, aka Bug ID CSCui94622...

Code injection

The Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended policy restrictions via unspecified vectors, aka Bug ID CSCui94622...

CVE-2013-5561

The Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended policy restrictions via unspecified vectors, aka Bug ID CSCui94622...

PT-2013-5641

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software affected versions not specified Description The issue concerns the Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security...

CVE-2013-5551: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Adaptive Security Appliance ASA Software, when certain same-security-traffic and management-access options are enabled, allows remote authenticated users to cause a denial of service stack overflow and device reload by using the clientless SSL VPN portal for internal-resource browsing, aka...

CVE-2013-5544

The VPN authentication functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service device reload by sending many username-from-cert IKE requests, aka Bug ID CSCua91108...