CVE-2013-6707

Cisco Adaptive Security Appliance Software < 9.1\(3\) - Resource Leak

Title source: rule

Description

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.

References (6)

[Broken Link] http://osvdb.org/100682

[Broken Link, Vendor Advisory] http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6707

[Vendor Advisory] http://tools.cisco.com/security/center/viewAlert.x?alertId=32065

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/64148

[Broken Link, Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1029441

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/89442

Scores

EPSS 0.0135

EPSS Percentile 79.8%

Classification

CWE

CWE-772

Status draft

Affected Products (1)

cisco/adaptive_security_appliance_software < 9.1\(3\)

Timeline

Published Dec 07, 2013

Tracked Since Feb 18, 2026