PT-2013-5597 · Cisco · Cisco Asa

CVE-2013-5513

·

Publicado

2013-10-09

·

Atualizado

2023-08-15

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 8.2.x through 8.2(5.45) Cisco Adaptive Security Appliance (ASA) Software versions 8.3.x through 8.3(2.38) Cisco Adaptive Security Appliance (ASA) Software versions 8.4.x through 8.4(6) Cisco Adaptive Security Appliance (ASA) Software versions 8.5.x through 8.5(1.17) Cisco Adaptive Security Appliance (ASA) Software versions 8.6.x through 8.6(1.11) Cisco Adaptive Security Appliance (ASA) Software versions 8.7.x through 8.7(1.6) Cisco Adaptive Security Appliance (ASA) Software versions 9.0.x through 9.0(3.2) Cisco Adaptive Security Appliance (ASA) Software versions 9.1.x through 9.1(1.7)
Description The issue allows remote attackers to cause a denial of service (device reload) via crafted TCP DNS packets when the DNS ALPI engine is enabled for TCP.
Recommendations For versions 8.2.x, update to 8.2(5.46) or later. For versions 8.3.x, update to 8.3(2.39) or later. For versions 8.4.x, update to 8.4(7) or later. For versions 8.5.x, update to 8.5(1.18) or later. For versions 8.6.x, update to 8.6(1.12) or later. For versions 8.7.x, update to 8.7(1.7) or later. For versions 9.0.x, update to 9.0(3.3) or later. For versions 9.1.x, update to 9.1(1.8) or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2013-5513

Produtos afetados

Cisco Asa