CVE-2015-6291

Cisco Email Security Appliance AsyncOS DoS via Malformed Attachment Fields

Title source: llm
STIX 2.1

Description

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance (ESA) devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and attachment-dictionary-match filtering, which allows remote attackers to cause a denial of service (memory consumption) via a crafted attachment in an e-mail message, aka Bug ID CSCuv47151.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034064

Scores

EPSS 0.0192
EPSS Percentile 77.5%

Details

CWE
CWE-20
Status published
Products (16)
cisco/email_security_appliance 7.7.0-000
cisco/email_security_appliance 7.7.1-000
cisco/email_security_appliance 8.0_base
cisco/email_security_appliance 8.5.6-052
cisco/email_security_appliance 8.5.6-073
cisco/email_security_appliance 8.5.6-074
cisco/email_security_appliance 8.5.6-106
cisco/email_security_appliance 8.5.6-113
cisco/email_security_appliance 8.5.7-042
cisco/email_security_appliance 8.5_base
... and 6 more
Published Nov 06, 2015
Tracked Since Feb 18, 2026