CVE-2016-1379

MEDIUM

Cisco Adaptive Security Appliance Software 9.0-9.5.1 - Authenticated Denial of Service via IPsec Error Processing

Title source: llm

Description

Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted (1) LAN-to-LAN or (2) Remote Access VPN tunnel packets, aka Bug ID CSCuv70576.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-asa-vpn

Scores

CVSS v3 6.5

EPSS 0.0115

EPSS Percentile 63.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-399

Status published

Products (50)

cisco/adaptive_security_appliance_software 9.0.1

cisco/adaptive_security_appliance_software 9.0.2

cisco/adaptive_security_appliance_software 9.0.2.10

cisco/adaptive_security_appliance_software 9.0.3

cisco/adaptive_security_appliance_software 9.0.3.6

cisco/adaptive_security_appliance_software 9.0.3.8

cisco/adaptive_security_appliance_software 9.0.4

cisco/adaptive_security_appliance_software 9.0.4.1

cisco/adaptive_security_appliance_software 9.0.4.5

cisco/adaptive_security_appliance_software 9.0.4.7

... and 40 more

Published May 28, 2016

Tracked Since Feb 18, 2026