PT-2013-5597 · Cisco · Cisco Asa

CVE-2013-5513

·

Published

2013-10-09

·

Updated

2023-08-15

CVSS v2.0

7.1

High

VectorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions 8.2.x through 8.2(5.45) Cisco Adaptive Security Appliance (ASA) Software versions 8.3.x through 8.3(2.38) Cisco Adaptive Security Appliance (ASA) Software versions 8.4.x through 8.4(6) Cisco Adaptive Security Appliance (ASA) Software versions 8.5.x through 8.5(1.17) Cisco Adaptive Security Appliance (ASA) Software versions 8.6.x through 8.6(1.11) Cisco Adaptive Security Appliance (ASA) Software versions 8.7.x through 8.7(1.6) Cisco Adaptive Security Appliance (ASA) Software versions 9.0.x through 9.0(3.2) Cisco Adaptive Security Appliance (ASA) Software versions 9.1.x through 9.1(1.7)
Description The issue allows remote attackers to cause a denial of service (device reload) via crafted TCP DNS packets when the DNS ALPI engine is enabled for TCP.
Recommendations For versions 8.2.x, update to 8.2(5.46) or later. For versions 8.3.x, update to 8.3(2.39) or later. For versions 8.4.x, update to 8.4(7) or later. For versions 8.5.x, update to 8.5(1.18) or later. For versions 8.6.x, update to 8.6(1.12) or later. For versions 8.7.x, update to 8.7(1.7) or later. For versions 9.0.x, update to 9.0(3.3) or later. For versions 9.1.x, update to 9.1(1.8) or later.

Fix

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2013-5513

Affected Products

Cisco Asa