Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20150408-asa)

The remote Cisco Adaptive Security Appliance ASA is missing a vendor-supplied security patch and is therefore affected by the following vulnerabilities : - A flaw exists in the failover ipsec feature due to not properly handling failover communication messages. An unauthenticated attacker, sendin...

CVE-2015-0676

Cisco ASA DNS Memory Exhaustion Vulnerability (CVE-2015-0676) affects ASA Software versions listed in the Cisco advisory/PT-2015-1056. The issue arises in the DNS code when handling outbound queries, enabling a MITM-like sequence to trigger crafted DNS responses that exhaust memory and can cause ...