CVE-2014-3382

The CVE-2014-3382 entry corresponds to a DoS in Cisco ASA's SQLNET Inspection Engine. A remote attacker can trigger a device reload by sending crafted SQL REDIRECT packets, affecting ASA Software releases listed in the advisory (7.2–9.1 family with specific sub-versions). The vulnerability is tie...

CVE-2014-3387

The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.25.14, 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.5 before 8.51.21, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.5, and 9.1 before 9.15.3 allows remote attackers to cause a denial of service device reloa...

CVE-2014-3388: Undefined Security Weakness

The DNS inspection engine in Cisco ASA Software 9.0 before 9.04.13, 9.1 before 9.15.7, and 9.2 before 9.22 allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCuo68327...

CVE-2014-3386: Undefined Security Weakness

The GPRS Tunneling Protocol GTP inspection engine in Cisco ASA Software 8.2 before 8.25.51, 8.4 before 8.47.15, 8.7 before 8.71.13, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via a crafted series of GTP packets, aka Bug ID CSCum5639...

CVE-2014-3387: Undefined Security Weakness

The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.25.14, 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.5 before 8.51.21, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.5, and 9.1 before 9.15.3 allows remote attackers to cause a denial of service device reloa...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20141008-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - A flaw exists in the SQLNET Inspection Engine due to improper handling of SQL REDIRECT packets. An attacker can exploit this vulnerability by sending a crafted sequence of REDIRECT packets through the...

CVE-2014-3382: Improper Neutralization of Special Elements used in an SQL Command

The SQLNet inspection engine in Cisco ASA Software 7.2 before 7.25.13, 8.2 before 8.25.50, 8.3 before 8.32.42, 8.4 before 8.47.15, 8.5 before 8.51.21, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.5, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reloa...

CVE-2014-2154: Undefined Security Weakness

Memory leak in the SIP inspection engine in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and instability via crafted SIP packets, aka Bug ID CSCuf67469...

Code injection

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

CVE-2014-2129: Improper Input Validation

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

Cisco Firewall Services Module Software Multiple Vulnerabilities (cisco-sa-20131009-fwsm)

The remote Cisco Firewall Services Module FWSM device is affected by one or both of the following vulnerabilities. - A flaw exists in FWSM that could allow an authenticated, unprivileged, local attacker to execute certain commands in any other context of the affected system. CVE-2013-5506 - A fla...

CVE-2013-5508

CVE-2013-5508 affects Cisco ASA/ FWSM SQLNet Inspection Engine. The vulnerability allows remote attackers to cause a DoS (device reload) by sending crafted segmented TNS packets. Impacted versions include ASA software 7.x–9.1.x (with specific 7.2(5.12), 8.2(5.44), 8.3(2.39), 8.4(6), 8.5(1.18), 8....

CVE-2013-5508: Improper Input Validation

The SQLNet inspection engine in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.44, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.5.x before 8.51.18, 8.6.x before 8.61.12, 8.7.x before 8.71.6, 9.0.x before 9.02.10, and 9.1.x before 9.12 and Firewall Services Module...

Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20121010-asa)

The remote Cisco ASA is missing a security patch and, therefore, may be affected by the following issues : - A remote, unauthenticated attacker could cause a denial of service by sending specially crafted DHCP packets. CVE-2012-4643 - When configured for Clientless or AnyConnect SSL VPN, receivin...

Stack overflow

Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.34, 8.4 before 8.44.4, 8.5 before 8.51.13, and 8.6 before 8.61.3 and th...

CVE-2012-4660: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SIP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.17, 8.3 before 8.32.28, 8.4 before 8.42.13, 8.5 before 8.51.4, and 8.6 before 8.61.5 allows remote...

CVE-2012-4662: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...

CVE-2012-4661: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.34, 8.4 before 8.44.4, 8.5 before 8.51.13, and 8.6 before 8.61.3 and th...

PT-2012-5531 · Cisco · Cisco Asa Services Module +3

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 through 8.32.33 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 through 8.44.3 Cisco Adaptive Security Appliances ASA 5500 series devices versions...