Description
The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), and 100.14(1.1) does not properly implement multicast-forwarding registration, which allows remote attackers to cause a denial of service (forwarding outage) via a crafted multicast packet, aka Bug ID CSCus74398.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38937
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032381
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/74750
Scores
EPSS
0.0334
EPSS Percentile
87.4%
Details
CWE
CWE-399
Status
published
Products (11)
cisco/adaptive_security_appliance_software
9.2\(3.4\)
cisco/adaptive_security_appliance_software
9.4\(0.115\)
cisco/adaptive_security_appliance_software
100.13\(0.21\)
cisco/adaptive_security_appliance_software
100.13\(20.3\)
cisco/adaptive_security_appliance_software
100.13\(21.9\)
cisco/adaptive_security_appliance_software
9.2\(0.0\)
cisco/adaptive_security_appliance_software
9.2\(0.104\)
cisco/adaptive_security_appliance_software
9.2\(3.1\)
cisco/adaptive_security_appliance_software
9.3\(1.105\)
cisco/adaptive_security_appliance_software
9.3\(2.100\)
... and 1 more
Published
May 21, 2015
Tracked Since
Feb 18, 2026