Description
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000 Series platform could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to a communication error between internal functions. An attacker could exploit this vulnerability by sending a crafted SSL/TLS message to an affected device. A successful exploit could allow the attacker to cause a buffer underrun, which leads to a crash. The crash causes the affected device to reload.
CVSS breakdown
CVSS 3.0
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Cisco / asa_5505_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5505_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5510_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5510_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5512-x_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5512-x_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5515-x_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5515-x_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5520_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5520_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5525-x_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5525-x_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5540_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5540_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5545-x_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5545-x_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5550_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5550_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5555-x_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5555-x_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5580_firmware9.12(2.12) – 9.12(2.12)
- Cisco / asa_5580_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5585-x_firmware9.13(0.33) – 9.13(0.33)
- Cisco / asa_5585-x_firmware9.12(2.12) – 9.12(2.12)
- Cisco / Cisco Firepower Threat Defense Softwaren/a – n/a
- Cisco / secure_firewall_threat_defense6.4.0 – 6.4.0.9
References
Updated 20m ago · 8 sources