Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability

CVE-2024-20260

Summary

A vulnerability in the Cisco Adaptive Security Virtual Appliance and Cisco Secure Firewall Threat Defense Virtual platforms permits unauthenticated remote attackers to exploit inadequate memory management associated with new incoming SSL/TLS connections. By overwhelming the virtual devices with numerous connection requests, attackers can cause the system to experience a progressive depletion of available memory. This condition can severely impair the processing of SSL VPN connections, leading to interruptions in service. Recovery may require halting the attack traffic, although a manual device reload could be necessary for immediate restoration of operations.

References