Vulnerabilities > CVE-2016-1379 - Resource Management Errors vulnerability in Cisco Adaptive Security Appliance Software

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cisco

CWE-399

NVD

Published: 2016-05-28

Updated: 2023-08-15

Summary

Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted (1) LAN-to-LAN or (2) Remote Access VPN tunnel packets, aka Bug ID CSCuv70576.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2 Cisco Adaptive Security Appliance Software 9.1.4.5 Cisco Adaptive Security Appliance Software 9.2.2 Cisco Adaptive Security Appliance Software 9.3.3.2 Cisco Adaptive Security Appliance Software 9.1.6.6 Cisco Adaptive Security Appliance Software 9.1.6.1 Cisco Adaptive Security Appliance Software 9.2\(3.1\) Cisco Adaptive Security Appliance Software 9.3\(2.100\) Cisco Adaptive Security Appliance Software 9.2\(0.104\) Cisco Adaptive Security Appliance Software 9.4.1.2 Cisco Adaptive Security Appliance Software 9.2\(0.0\) Cisco Adaptive Security Appliance Software 9.3\(1.105\) Cisco Adaptive Security Appliance Software 9.1.6 Cisco Adaptive Security Appliance Software 9.3.3 Cisco Adaptive Security Appliance Software 9.3.3.5 Cisco Adaptive Security Appliance Software 9.2.4 Cisco Adaptive Security Appliance Software 9.1.6.4 Cisco Adaptive Security Appliance Software 9.2.3.3 Cisco Adaptive Security Appliance Software 9.5.1 Cisco Adaptive Security Appliance Software 9.2.3.4 Cisco Adaptive Security Appliance Software 9.3.3.1 Cisco Adaptive Security Appliance Software 9.4.1.5 Cisco Adaptive Security Appliance Software 9.4.1.3 Cisco Adaptive Security Appliance Software 9.4.1 Cisco Adaptive Security Appliance Software 9.1.6.8 Cisco Adaptive Security Appliance Software 9.3\(2.243\) Cisco Adaptive Security Appliance Software 9.3\(1.50\) Cisco Adaptive Security Appliance Software 9.4.0.115 Cisco Adaptive Security Appliance Software 9.4.1.1 Cisco Adaptive Security Appliance Software 9.3.3.6 Cisco Adaptive Security Appliance Software 9.0.4.37 Cisco Adaptive Security Appliance Software 9.0.4 Cisco Adaptive Security Appliance Software 9.0.4.5 Cisco Adaptive Security Appliance Software 9.0.4.7 Cisco Adaptive Security Appliance Software 9.0.4.26 Cisco Adaptive Security Appliance Software 9.0.3.8 Cisco Adaptive Security Appliance Software 9.0.4.35 Cisco Adaptive Security Appliance Software 9.0.4.17 Cisco Adaptive Security Appliance Software 9.0.3.6 Cisco Adaptive Security Appliance Software 9.0.2.10 Cisco Adaptive Security Appliance Software 9.0.1 Cisco Adaptive Security Appliance Software 9.0.4.33 Cisco Adaptive Security Appliance Software 9.0.4.24 Cisco Adaptive Security Appliance Software 9.0.2 Cisco Adaptive Security Appliance Software 9.0.4.20 Cisco Adaptive Security Appliance Software 9.0.4.29 Cisco Adaptive Security Appliance Software 9.0.3 Cisco Adaptive Security Appliance Software 9.0.4.1	68

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-vpn