SB2017041903 - Remote DoS when processing IPSec packets in Cisco ASA

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017041903

SB2017041903 - Remote DoS when processing IPSec packets in Cisco ASA

Published: April 19, 2017

Security Bulletin ID SB2017041903
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Improper input validation (CVE-ID: CVE-2017-6609)

The vulnerability allows a remote attacker to cause denial of service vulnerability.

The vulnerability exists due to improper parsing of malformed IPsec packets. A remote authenticated attacker can send specially crafted IPsec packets to the affected system and perform a denial of service (DoS) attack. This vulnerability affects systems configured in routed firewall mode only and in single or multiple context mode. This vulnerability can be triggered by IPv4 and IPv6 traffic. An attacker needs to establish a valid IPsec tunnel before exploiting this vulnerability.


Remediation

Install update from vendor's website.

References