Buffer overflow in Cisco Adaptive Security Appliance (ASA) - CVE-2016-6432

Vulnerability identifier: #VU1048

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-6432

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote unauthenticated user to execute arbitrary code on the target system.
The weakness is caused by improper checking of the input. By returning a specially crafted NetBIOS packet via IPv4 in response to a NetBIOS probe sent by the target system, attackers can trigger a buffer overflow that lets execute arbitrary code.
Successful exploitation of the vulnerability results in arbitrary code execution on the vulnerable system.

Cisco Adaptive Security Appliance (ASA)
openEuler
ffmpeg
ffmpeg-debuginfo
ffmpeg-debugsource
ffmpeg-devel
ffmpeg-libs
libavdevice

Update to version 9.0(4.42), 9.1(7.11), 9.2(4.17), 9.3(3.11), 9.4(3.11), 9.5(3.1), 9.6(2.1).

ffmpeg - update to 4.2.4-14
ffmpeg-debuginfo - update to 4.2.4-14
ffmpeg-debugsource - update to 4.2.4-14
ffmpeg-devel - update to 4.2.4-14
ffmpeg-libs - update to 4.2.4-14
libavdevice - update to 4.2.4-14

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-idfw

• Buffer overflow in Cisco ASA
• openEuler 22.03 LTS SP4 update for ffmpeg