CVE-2016-1381

CVE-2016-1381 concerns Cisco AsyncOS on Web Security Appliance (WSA) versions 8.5–9.0 before 9.0.1-162. The issue is a memory leak in the cached file-range request path: an unauthenticated, remote attacker can open multiple connections that request file ranges from cached content, causing memory ...