Description
A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this vulnerability by ensuring that the device will connect to an SSL/TLS server that is using specific encryption parameters. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco Adaptive Security Appliance (ASA) Software
9.14.1affected9.14.1.10affected9.14.1.15affected9.14.1.19affected9.14.1.30affected9.14.2affected9.14.2.4affected9.14.2.8affected9.14.2.13affected9.14.2.15affected9.14.3affected9.14.3.1affected9.14.3.9affected9.14.3.11affected9.14.3.13affected9.14.3.18affected9.14.3.15affected9.15.1affected9.15.1.7affected9.15.1.10affected9.15.1.15affected9.15.1.16affected9.15.1.17affected9.15.1.1affected9.15.1.21affected
Cisco Cisco Firepower Threat Defense Software
6.6.0affected6.6.0.1affected6.6.1affected6.6.3affected6.6.4affected6.6.5affected6.6.5.1affected6.6.5.2affected6.7.0affected6.7.0.1affected6.7.0.2affected6.7.0.3affected
Cisco Cisco FirePOWER Services Software for ASA
N/Aaffected