CVE-2014-3385

Race condition in the Health and Performance Monitoring HPM for ASDM feature in Cisco ASA Software 8.3 before 8.32.42, 8.4 before 8.47.11, 8.5 before 8.51.19, 8.6 before 8.61.13, 8.7 before 8.71.11, 9.0 before 9.04.8, and 9.1 before 9.14.5 allows remote attackers to cause a denial of service devi...

CVE-2014-3383

CVE-2014-3383 affects Cisco ASA Software 9.1 before 9.1(5.1). The IKE implementation in the VPN component can be triggered by crafted UDP packets, allowing a remote attacker to cause a denial of service (device reload). Affected description is supported by multiple sources in the provided connect...

CVE-2014-3388: Undefined Security Weakness

The DNS inspection engine in Cisco ASA Software 9.0 before 9.04.13, 9.1 before 9.15.7, and 9.2 before 9.22 allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCuo68327...

CVE-2014-3384: Undefined Security Weakness

The IKEv2 implementation in Cisco ASA Software 8.4 before 8.47.15, 8.6 before 8.61.14, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via a crafted packet that is sent during tunnel creation, aka Bug ID CSCum96401...

CVE-2014-3383: Undefined Security Weakness

The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via crafted UDP packets, aka Bug ID CSCul36176...

CVE-2014-3386: Undefined Security Weakness

The GPRS Tunneling Protocol GTP inspection engine in Cisco ASA Software 8.2 before 8.25.51, 8.4 before 8.47.15, 8.7 before 8.71.13, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via a crafted series of GTP packets, aka Bug ID CSCum5639...

CVE-2014-3387: Undefined Security Weakness

The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.25.14, 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.5 before 8.51.21, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.5, and 9.1 before 9.15.3 allows remote attackers to cause a denial of service device reloa...

Cisco ASA Local Path Inclusion Vulnerability

A vulnerability in the function that exports environment variables of Cisco ASA Software could allow an authenticated, local attacker to inject a malicious library and take complete control of the system. The vulnerability is due to improper setting of the LDLIBRARYPATH environment. An attacker...

PT-2014-5276

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions 8.2 through 8.25.50 Cisco ASA Software versions 8.4 through 8.47.14 Cisco ASA Software versions 8.7 through 8.71.12 Cisco ASA Software versions 9.0 through 9.04.7 Cisco ASA Software versions 9.1 through 9.15.0...

PT-2014-5278

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions 9.0 through 9.04.12 Cisco ASA Software versions 9.1 through 9.15.6 Cisco ASA Software versions 9.2 through 9.21 Description The issue allows remote attackers to cause a denial of service, resulting in a device reloa...

PT-2014-5273

Name of the Vulnerable Software and Affected Versions Cisco ASA Software version 9.1 before 9.15.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted UDP packets. There have been reports of disruption to some devices...

PT-2014-5277

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions 7.2 through 7.25.13 Cisco ASA Software versions 8.2 through 8.25.50 Cisco ASA Software versions 8.3 through 8.32.41 Cisco ASA Software versions 8.4 through 8.47.22 Cisco ASA Software versions 8.5 through 8.51.20 Cis...

PT-2014-5281 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions 8.x before 8.43 Cisco ASA Software version 8.5 Cisco ASA Software versions 8.7 before 8.71.13 Description: The issue allows local users to gain privileges by placing a Trojan horse library file in external memory...

PT-2014-5275

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions 8.3 through 8.32.41 Cisco ASA Software versions 8.4 through 8.47.10 Cisco ASA Software versions 8.5 through 8.51.18 Cisco ASA Software versions 8.6 through 8.61.12 Cisco ASA Software versions 8.7 through 8.71.10 Cis...

Cisco IOS Software RSVP DoS (cisco-sa-20140924-rsvp)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...

Cisco IOS XE Software RSVP DoS (cisco-sa-20140924-rsvp)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...

CVE-2014-3356

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

Code injection

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service device reload via multipart SDP IPv4 traffic, aka Bug ID CSCun54071...

Code injection

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

CVE-2014-3360: Improper Neutralization of Special Elements used in an OS Command

Cisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allow remote attackers to cause a denial of service device reload via a crafted SIP message, aka Bug ID...