CVE-2010-4679

Cisco Adaptive Security Appliance Software < 8.2(3) - Denial of Service via OCSP Connection Failure

Title source: llm
STIX 2.1

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures, which allows remote OCSP responders to cause a denial of service (TCP socket exhaustion) by rejecting connection attempts, aka Bug ID CSCsz36816.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1024963
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/45767
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42931
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64605

Scores

EPSS 0.0113
EPSS Percentile 62.6%

Details

CWE
CWE-20
Status published
Products (49)
cisco/5500_series_adaptive_security_appliance
cisco/adaptive_security_appliance_software 7.0
cisco/adaptive_security_appliance_software 7.0\(0\)
cisco/adaptive_security_appliance_software 7.0\(2\)
cisco/adaptive_security_appliance_software 7.0\(4\)
cisco/adaptive_security_appliance_software 7.0\(5\)
cisco/adaptive_security_appliance_software 7.0\(5.2\)
cisco/adaptive_security_appliance_software 7.0\(6.7\)
cisco/adaptive_security_appliance_software 7.0.1
cisco/adaptive_security_appliance_software 7.0.1.4
... and 39 more
Published Jan 07, 2011
Tracked Since Feb 18, 2026