Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.106054
Categoría:CISCO
Título:Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns1)
Resumen:A vulnerability in the DNS code of Cisco ASA may lead to a; denial of service.
Descripción:Summary:
A vulnerability in the DNS code of Cisco ASA may lead to a
denial of service.

Vulnerability Insight:
A vulnerability in the DNS code could allow an unauthenticated,
remote attacker to cause an affected system to reload. The vulnerability is due to improper
processing of DNS packets. An attacker could exploit this vulnerability by sending a request to
an affected Cisco ASA appliance to cause it to generate a DNS request packet. The attacker would
need to spoof the reply packet with a crafted DNS response. Only traffic directed to the affected
device can be used to exploit this vulnerability.

Vulnerability Impact:
An unauthenticated, remote attacker could cause the system to
reload.

Affected Software/OS:
Version 7.2, 8.2, 8.3, 8.4, 8.5, 8.6, 8.7, 9.0, 9.1, 9.2, 9.3
and 9.4 on Cisco Adaptive Security Virtual Appliance (ASAv), Cisco ASA 1000V Cloud Firewall,
Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation
Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600
Series Routers.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
7.1

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2015-6325
BugTraq ID: 77260
http://www.securityfocus.com/bid/77260
Cisco Security Advisory: 20151021 Cisco ASA Software DNS Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns1
http://www.securitytracker.com/id/1033913
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.