Denial of Service Vulnerability in Cisco Adaptive Security Appliance
CVE-2016-9225

8.6HIGH

Key Information:

Vendor

Cisco
Status
All Versions Of The Asa Cx Context-aware Security Module
Vendor
CVE Published:
1 February 2017

What is CVE-2016-9225?

A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security module may allow an unauthenticated remote attacker to disrupt service by sending specially crafted fragmented IP traffic. This could exhaust system resources, leading to a denial of service condition where the CX module is unable to process further traffic. Notably, there are no patches or workarounds available to mitigate this vulnerability, putting all versions of this module at risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

all of the ASA CX Context-Aware Security module all versions of the ASA CX Context-Aware Security module

References

http://www.securityfocus.com/bid/95788
vdb-entryx_refsource_BID
https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1037696
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.