Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.106072
Kategorie:CISCO
Titel:Cisco Adaptive Security Appliance Software DHCPv6 Relay Denial of Service Vulnerability (cisco-sa-20160420-asa-dhcpv6)
Zusammenfassung:A vulnerability in the DHCPv6 relay feature of Cisco Adaptive; Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an; affected device to reload.
Beschreibung:Summary:
A vulnerability in the DHCPv6 relay feature of Cisco Adaptive
Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an
affected device to reload.

Vulnerability Insight:
The vulnerability is due to insufficient validation of DHCPv6
packets. An attacker could exploit this vulnerability by sending crafted DHCPv6 packets to an
affected device, resulting in a denial of service (DoS) condition.

This vulnerability affects systems configured in routed firewall mode and in single or multiple
context mode. Cisco ASA Software is affected by this vulnerability only if the software is
configured with the DHCPv6 relay feature. The vulnerability is triggered only by IPv6 traffic.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2016-1367
Cisco Security Advisory: 20160420 Cisco Adaptive Security Appliance Software DHCPv6 Relay Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-asa-dhcpv6
http://www.securitytracker.com/id/1035635
CopyrightCopyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.