Missing Release of Resource after Effective Lifetime in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) - CVE-2024-20493

Vulnerability identifier: #VU99328

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-20493

CWE-ID: CWE-772

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to ineffective handling of memory resources during the authentication process within the login authentication functionality of the Remote Access SSL VPN feature. A remote attacker can cause a denial of service condition on the target system.

Cisco Secure Firewall Threat Defense (FTD)
Cisco Secure Firewall Adaptive Security Appliance (ASA)

Install updates from vendor's website.

Cisco Secure Firewall Threat Defense (FTD) - addressed in versions 7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1
Cisco Secure Firewall Adaptive Security Appliance (ASA) - addressed in versions 7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-vpn-4gYEWMKg

• Denial of service in Cisco Adaptive Security Appliance and Firepower Threat Defense Software