SB2016101917 - Denial of service in Cisco ASA 5500-X Series
Published: October 19, 2016 Updated: April 5, 2018
Security Bulletin ID
SB2016101917
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Denial of service (CVE-ID: CVE-2016-6439)
The vulnerability allows a remote anauthenticated user to cause DoS conditions on the target system.The weakness is due to resource management error. By sending a specially crafted data, attackers can trigger the Snort process restart and bypass Snort detection.
Successful exploitation results in denial of service that may lead to further attacks on the vulnerable system.
Remediation
Install update from vendor's website.