Denial of service in Cisco ASA 5500-X Series - CVE-2016-6439

Vulnerability identifier: #VU1047

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-6439

CWE-ID: CWE-399

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote anauthenticated user to cause DoS conditions on the target system.
The weakness is due to resource management error. By sending a specially crafted data, attackers can trigger the Snort process restart and bypass Snort detection.
Successful exploitation results in denial of service that may lead to further attacks on the vulnerable system.

Cisco ASA 5500-X Series
openEuler
vte291
vte291-debuginfo
vte291-debugsource
vte291-devel

Install update from vendor's website.

vte291 - update to 0.62.3-2
vte291-debuginfo - update to 0.62.3-2
vte291-debugsource - update to 0.62.3-2
vte291-devel - update to 0.62.3-2

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-fpsnort

• Denial of service in Cisco ASA 5500-X Series
• openEuler 22.03 LTS SP1 update for vte291