CVE-2016-1380

CVE-2016-1380 affects Cisco AsyncOS on Web Security Appliance (WSA): Software versions 8.0 before 8.0.6-119 are vulnerable to a denial of service via a crafted HTTP POST request that causes the proxy process to hang. Exploitation requires no authentication and is remote. The issue stems from impr...

CVE-2016-1381

Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via an HTTP file-range request for cached content, aka Bug ID CSCuw97270...

CVE-2016-1383

Cisco AsyncOS on Web Security Appliance (WSA) up to version 8.8 is affected by CVE-2016-1383 due to a memory handling flaw when processing a certain HTTP response code, causing a denial of service via memory exhaustion. A remote, unauthenticated attacker can exploit this with specially crafted HT...

CVE-2016-1382

Cisco AsyncOS on Web Security Appliance (WSA) is affected by CVE-2016-1382 due to improper memory allocation for HTTP requests, enabling unauthenticated remote DoS via crafted HTTP traffic that can trigger a proxy-process reload. Affected versions are Cisco AsyncOS prior to 8.5.3-069 and 8.6 thro...

Cisco fixes high-risk network security equipment vulnerability-vulnerability warning-the black bar safety net

! These defects can be specially crafted HTTP request to use to cause a denial of service condition The Cisco system had been repaired four denial of service vulnerability these vulnerabilities can be exploited by attackers to cause network security devices to stop properly handle network traffic...

Cisco WSA Multiple Vulnerabilities 05/16

Cisco WSA Software is prone to multiple vulnerabilities. CVE-2016-1380 A vulnerability that occurs when parsing an HTTP POST request with Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS vulnerability due to the...

Cisco WSA HTTPS Packet Processing Denial of Service Vulnerability

Cisco WSA Software is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-1288

The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service service outage by leveraging certain intranet connectivity and sending a malformed HTTPS request, aka Bug ID CSCuu24840...

CVE-2016-1288

CVE-2016-1288 affects Cisco Web Security Appliance (WSA) via the HTTPS Proxy/HTTPS packet handling. Cisco AsyncOS prior to 8.5.3-051 and 9.x prior to 9.0.0-485 are vulnerable to a DoS when an unauthenticated remote attacker sends a malformed HTTPS request, causing service outages. The issue stems...

CVE-2016-1296

The proxy engine on Cisco Web Security Appliance WSA devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848...

Design/Logic Flaw

The proxy engine on Cisco Web Security Appliance WSA devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848...

CVE-2016-1296

The CVE-2016-1296 entry concerns Cisco Web Security Appliance (WSA) proxy engine that, on affected software versions 8.5.3-055, 9.1.0-000, and 9.5.0-235, could be bypassed by a remote attacker through a malformed HTTP method, enabling an unauthenticated bypass of proxy restrictions. Root cause is...

CVE-2015-6386

The Cisco Web Security Appliance (WSA) passthrough FTP feature is affected. A vulnerability in WSA software versions 8.0.7-142 and 8.5.1-021 can allow an unauthenticated, remote attacker to cause a denial of service via FTP sessions where the control connection is closed after data transfer (Bug ...

Cisco Web Security Appliance Native FTP Denial of Service Vulnerability

A vulnerability in the native passthrough FTP functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to high CPU utilization. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions migh...

Cisco Web Security Appliance Native FTP Denial of Service Vulnerability

A vulnerability in the native passthrough FTP functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to high CPU utilization. The vulnerability occurs when the FTP client terminates the FTP contr...

CVE-2015-6298

The CVE-2015-6298 issue concerns Cisco AsyncOS for Web Security Appliance (WSA) and Cisco Web Security Appliance admin web interface. Affected AsyncOS versions include 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085. The root...

CVE-2015-6293

Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service memory consumption via multiple file-range requests, aka Bug ID CSCur391...

CVE-2015-6321

Cisco AsyncOS contains a denial-of-service vulnerability (CVE-2015-6321) in the network stack triggered by a flood of TCP packets, leading to memory exhaustion and disruption of new TCP connections. Affected products include Cisco Email Security Appliance (ESA) on various 8.5.x–9.6.x branches, Ci...

CVE-2015-6287

Cisco Web Security Appliance WSA 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service service outage via a flood of TCP traffic that leads to DNS resolution delays, aka Bug IDs CSCur32005 and CSCur07907...

Code injection

Cisco Web Security Appliance WSA 8.0.7 allows remote HTTP servers to cause a denial of service memory consumption from stale TCP connections via crafted responses, aka Bug ID CSCuw10426...