Memory Leak Vulnerability in Cisco Adaptive Security Appliances 5580 Series
CVE-2009-4914

Currently unrated

Key Information:

Vendor
Cisco
Status
Asa 5580
Vendor
CVE Published:
29 June 2010

Summary

A memory leak vulnerability exists in Cisco Adaptive Security Appliances (ASA) 5580 series devices running software versions prior to 8.1(2). Attackers can exploit this flaw by leveraging specific fields in X.509 certificates, particularly the Subject Alternative Name fields, resulting in excessive memory consumption. This condition can ultimately lead to a denial of service, affecting the availability of the device. Organizations using the affected devices should ensure that they upgrade to the recommended software versions to mitigate this risk.

References

http://www.cisco.com/en/US/docs/security/asa/asa81/releas...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.