CVE-2025-20225: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of C

Description

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition. This vulnerability is due to a lack of proper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. In the case of Cisco IOS and IOS XE Software, a successful exploit could allow the attacker to cause the device to reload unexpectedly. In the case of Cisco ASA and FTD Software, a successful exploit could allow the attacker to partially exhaust system memory, causing system instability such as being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco IOS

15.1(2)Taffected
15.1(1)T4affected
15.1(3)T2affected
15.1(1)T1affected
15.1(2)T0aaffected
15.1(3)T3affected
15.1(1)T3affected
15.1(2)T3affected
15.1(2)T4affected
15.1(1)T2affected
15.1(3)Taffected
15.1(2)T2aaffected
15.1(3)T1affected
15.1(1)Taffected
15.1(2)T2affected
15.1(2)T1affected
15.1(2)T5affected
15.1(3)T4affected
15.1(1)T5affected
15.3(1)Taffected
15.3(2)Taffected
15.3(1)T1affected
15.3(1)T2affected
15.3(1)T3affected
15.3(1)T4affected
15.3(2)T1affected
15.3(2)T2affected
15.3(2)T3affected
15.3(2)T4affected
15.0(2)EYaffected
15.0(2)EY1affected
15.0(2)EY2affected
15.0(2)EY3affected
15.1(4)M3affected
15.1(4)Maffected
15.1(4)M1affected
15.1(4)M2affected
15.1(4)M6affected
15.1(4)M5affected
15.1(4)M4affected
15.1(4)M7affected
15.1(4)M3aaffected
15.1(4)M10affected
15.1(4)M8affected
15.1(4)M9affected
15.0(2)SEaffected
15.0(2)SE1affected
15.0(2)SE2affected
15.0(2)SE3affected
15.0(2)SE4affected
15.0(2)SE5affected
15.0(2)SE6affected
15.0(2)SE7affected
15.0(2)SE8affected
15.0(2)SE9affected
15.0(2)SE10affected
15.0(2)SE11affected
15.0(2)SE10aaffected
15.0(2)SE12affected
15.0(2)SE13affected
15.1(2)GCaffected
15.1(2)GC1affected
15.1(2)GC2affected
15.1(4)GCaffected
15.1(4)GC1affected
15.1(4)GC2affected
15.1(1)SGaffected
15.1(2)SGaffected
15.1(1)SG1affected
15.1(1)SG2affected
15.1(2)SG1affected
15.1(2)SG2affected
15.1(2)SG3affected
15.1(2)SG4affected
15.1(2)SG5affected
15.1(2)SG6affected
15.1(2)SG7affected
15.1(2)SG8affected
15.2(4)Maffected
15.2(4)M1affected
15.2(4)M2affected
15.2(4)M4affected
15.2(4)M3affected
15.2(4)M5affected
15.2(4)M8affected
15.2(4)M10affected
15.2(4)M7affected
15.2(4)M6affected
15.2(4)M9affected
15.2(4)M6aaffected
15.2(4)M11affected
15.0(2)EXaffected
15.0(2)EX1affected
15.0(2)EX2affected
15.0(2)EX3affected
15.0(2)EX4affected
15.0(2)EX5affected
15.0(2)EX8affected
15.0(2a)EX5affected
15.0(2)EX10affected
15.0(2)EX11affected
15.0(2)EX13affected
15.0(2)EX12affected
15.2(1)GCaffected
15.2(1)GC1affected
15.2(1)GC2affected
15.2(2)GCaffected
15.2(3)GCaffected
15.2(3)GC1affected
15.2(4)GCaffected
15.2(4)GC1affected
15.2(4)GC2affected
15.2(4)GC3affected
15.1(1)SYaffected
15.1(1)SY1affected
15.1(2)SYaffected
15.1(2)SY1affected
15.1(2)SY2affected
15.1(1)SY2affected
15.1(1)SY3affected
15.1(2)SY3affected
15.1(1)SY4affected
15.1(2)SY4affected
15.1(1)SY5affected
15.1(2)SY5affected
15.1(2)SY4aaffected
15.1(1)SY6affected
15.1(2)SY6affected
15.1(2)SY7affected
15.1(2)SY8affected
15.1(2)SY9affected
15.1(2)SY10affected
15.1(2)SY11affected
15.1(2)SY12affected
15.1(2)SY13affected
15.1(2)SY14affected
15.1(2)SY15affected
15.1(2)SY16affected
15.4(1)Taffected
15.4(2)Taffected
15.4(1)T2affected
15.4(1)T1affected
15.4(1)T3affected
15.4(2)T1affected
15.4(2)T3affected
15.4(2)T2affected
15.4(1)T4affected
15.4(2)T4affected
15.2(1)Eaffected
15.2(2)Eaffected
15.2(1)E1affected
15.2(3)Eaffected
15.2(1)E2affected
15.2(1)E3affected
15.2(2)E1affected
15.2(4)Eaffected
15.2(3)E1affected
15.2(2)E2affected
15.2(2a)E1affected
15.2(2)E3affected
15.2(2a)E2affected
15.2(3)E2affected
15.2(3a)Eaffected
15.2(3)E3affected
15.2(4)E1affected
15.2(2)E4affected
15.2(2)E5affected
15.2(4)E2affected
15.2(3)E4affected
15.2(5)Eaffected
15.2(4)E3affected
15.2(2)E6affected
15.2(5)E1affected
15.2(5b)Eaffected
15.2(2)E5aaffected
15.2(2)E5baffected
15.2(5a)E1affected
15.2(4)E4affected
15.2(2)E7affected
15.2(5)E2affected
15.2(6)Eaffected
15.2(4)E5affected
15.2(5)E2caffected
15.2(2)E8affected
15.2(6)E0aaffected
15.2(6)E1affected
15.2(6)E0caffected
15.2(4)E6affected
15.2(6)E2affected
15.2(2)E9affected
15.2(4)E7affected
15.2(7)Eaffected
15.2(2)E10affected
15.2(4)E8affected
15.2(6)E2aaffected
15.2(7)E1affected
15.2(7)E0aaffected
15.2(7)E0baffected
15.2(7)E0saffected
15.2(6)E3affected
15.2(4)E9affected
15.2(7)E2affected
15.2(7a)E0baffected
15.2(4)E10affected
15.2(7)E3affected
15.2(7)E1aaffected
15.2(7b)E0baffected
15.2(4)E10aaffected
15.2(7)E4affected
15.2(8)Eaffected
15.2(8)E1affected
15.2(7)E5affected
15.2(7)E6affected
15.2(8)E2affected
15.2(4)E10daffected
15.2(7)E7affected
15.2(8)E3affected
15.2(7)E8affected
15.2(8)E4affected
15.2(7)E9affected
15.2(8)E5affected
15.2(8)E6affected
15.2(7)E10affected
15.2(7)E11affected
15.2(8)E7affected
15.2(7)E12affected
15.1(3)MRA3affected
15.1(3)MRA4affected
15.1(3)SVB1affected
15.1(3)SVB2affected
15.4(2)S3affected
15.3(3)Maffected
15.3(3)M1affected
15.3(3)M2affected
15.3(3)M3affected
15.3(3)M5affected
15.3(3)M4affected
15.3(3)M6affected
15.3(3)M7affected
15.3(3)M8affected
15.3(3)M9affected
15.3(3)M10affected
15.3(3)M8aaffected
15.2(4)JNaffected
15.0(2)EZaffected
15.1(3)SVDaffected
15.1(3)SVD1affected
15.1(3)SVD2affected
15.2(1)EYaffected
15.0(2)EJaffected
15.0(2)EJ1affected
15.2(1)SYaffected
15.2(1)SY1affected
15.2(1)SY0aaffected
15.2(1)SY2affected
15.2(2)SYaffected
15.2(1)SY1aaffected
15.2(2)SY1affected
15.2(2)SY2affected
15.2(1)SY3affected
15.2(1)SY4affected
15.2(2)SY3affected
15.2(1)SY5affected
15.2(1)SY6affected
15.2(1)SY7affected
15.2(1)SY8affected
15.1(3)SVFaffected
15.1(3)SVF1affected
15.1(3)SVEaffected
15.0(2)EKaffected
15.0(2)EK1affected
15.4(1)CGaffected
15.4(1)CG1affected
15.4(2)CGaffected
15.1(3)SVGaffected
15.2(2)EBaffected
15.2(2)EB1affected
15.2(2)EB2affected
15.2(6)EBaffected
15.5(1)Taffected
15.5(1)T1affected
15.5(2)Taffected
15.5(1)T2affected
15.5(1)T3affected
15.5(2)T1affected
15.5(2)T2affected
15.5(2)T3affected
15.5(2)T4affected
15.5(1)T4affected
15.2(2)EAaffected
15.2(2)EA2affected
15.2(3)EAaffected
15.2(4)EAaffected
15.2(4)EA1affected
15.2(2)EA3affected
15.2(5)EAaffected
15.2(4)EA4affected
15.2(4)EA5affected
15.2(4)EA6affected
15.2(4)EA7affected
15.2(4)EA8affected
15.2(4)EA9affected
15.2(4)EA9aaffected
15.5(3)Maffected
15.5(3)M1affected
15.5(3)M0aaffected
15.5(3)M2affected
15.5(3)M3affected
15.5(3)M4affected
15.5(3)M4aaffected
15.5(3)M5affected
15.5(3)M6affected
15.5(3)M7affected
15.5(3)M6aaffected
15.5(3)M8affected
15.5(3)M9affected
15.5(3)M10affected
15.6(1)Taffected
15.6(2)Taffected
15.6(1)T0aaffected
15.6(1)T1affected
15.6(2)T1affected
15.6(1)T2affected
15.6(2)T2affected
15.6(1)T3affected
15.6(2)T3affected
15.3(1)SYaffected
15.3(1)SY1affected
15.3(1)SY2affected
15.6(3)Maffected
15.6(3)M1affected
15.6(3)M0aaffected
15.6(3)M1baffected
15.6(3)M2affected
15.6(3)M2aaffected
15.6(3)M3affected
15.6(3)M3aaffected
15.6(3)M4affected
15.6(3)M5affected
15.6(3)M6affected
15.6(3)M7affected
15.6(3)M6aaffected
15.6(3)M6baffected
15.6(3)M8affected
15.6(3)M9affected
15.1(3)SVJ2affected
15.2(4)EC1affected
15.2(4)EC2affected
15.3(3)JPC5affected
15.4(1)SYaffected
15.4(1)SY1affected
15.4(1)SY2affected
15.4(1)SY3affected
15.4(1)SY4affected
15.5(1)SYaffected
15.5(1)SY1affected
15.5(1)SY2affected
15.5(1)SY3affected
15.5(1)SY4affected
15.5(1)SY5affected
15.5(1)SY6affected
15.5(1)SY7affected
15.5(1)SY8affected
15.5(1)SY9affected
15.5(1)SY10affected
15.5(1)SY11affected
15.5(1)SY12affected
15.5(1)SY13affected
15.5(1)SY14affected
15.5(1)SY15affected
15.7(3)Maffected
15.7(3)M1affected
15.7(3)M0aaffected
15.7(3)M3affected
15.7(3)M2affected
15.7(3)M4affected
15.7(3)M5affected
15.7(3)M4aaffected
15.7(3)M4baffected
15.7(3)M6affected
15.7(3)M7affected
15.7(3)M8affected
15.7(3)M9affected
15.8(3)Maffected
15.8(3)M1affected
15.8(3)M0aaffected
15.8(3)M0baffected
15.8(3)M2affected
15.8(3)M1aaffected
15.8(3)M3affected
15.8(3)M2aaffected
15.8(3)M4affected
15.8(3)M3aaffected
15.8(3)M3baffected
15.8(3)M5affected
15.8(3)M6affected
15.8(3)M7affected
15.8(3)M8affected
15.8(3)M9affected
15.9(3)Maffected
15.9(3)M1affected
15.9(3)M0aaffected
15.9(3)M2affected
15.9(3)M3affected
15.9(3)M2aaffected
15.9(3)M3aaffected
15.9(3)M4affected
15.9(3)M3baffected
15.9(3)M5affected
15.9(3)M4aaffected
15.9(3)M6affected
15.9(3)M7affected
15.9(3)M6aaffected
15.9(3)M6baffected
15.9(3)M8affected
15.9(3)M7aaffected
15.9(3)M9affected
15.9(3)M8baffected
15.9(3)M10affected
15.9(3)M11affected

Cisco Cisco Adaptive Security Appliance (ASA) Software

9.8.1affected
9.8.1.5affected
9.8.1.7affected
9.8.2affected
9.8.2.8affected
9.8.2.14affected
9.8.2.15affected
9.8.2.17affected
9.8.2.20affected
9.8.2.24affected
9.8.2.26affected
9.8.2.28affected
9.8.2.33affected
9.8.2.35affected
9.8.2.38affected
9.8.3.8affected
9.8.3.11affected
9.8.3.14affected
9.8.3.16affected
9.8.3.18affected
9.8.3.21affected
9.8.3affected
9.8.3.26affected
9.8.3.29affected
9.8.4affected
9.8.4.3affected
9.8.4.7affected
9.8.4.8affected
9.8.4.10affected
9.8.4.12affected
9.8.4.15affected
9.8.4.17affected
9.8.2.45affected
9.8.4.25affected
9.8.4.20affected
9.8.4.22affected
9.8.4.26affected
9.8.4.29affected
9.8.4.32affected
9.8.4.33affected
9.8.4.34affected
9.8.4.35affected
9.8.4.39affected
9.8.4.40affected
9.8.4.41affected
9.8.4.43affected
9.8.4.44affected
9.8.4.45affected
9.8.4.46affected
9.8.4.48affected
9.12.1affected
9.12.1.2affected
9.12.1.3affected
9.12.2affected
9.12.2.4affected
9.12.2.5affected
9.12.2.9affected
9.12.3affected
9.12.3.2affected
9.12.3.7affected
9.12.4affected
9.12.3.12affected
9.12.3.9affected
9.12.2.1affected
9.12.4.2affected
9.12.4.4affected
9.12.4.7affected
9.12.4.10affected
9.12.4.13affected
9.12.4.8affected
9.12.4.18affected
9.12.4.24affected
9.12.4.26affected
9.12.4.29affected
9.12.4.30affected
9.12.4.35affected
9.12.4.37affected
9.12.4.38affected
9.12.4.39affected
9.12.4.40affected
9.12.4.41affected
9.12.4.47affected
9.12.4.48affected
9.12.4.50affected
9.12.4.52affected
9.12.4.54affected
9.12.4.55affected
9.12.4.56affected
9.12.4.58affected
9.12.4.62affected
9.12.4.65affected
9.12.4.67affected
9.14.1affected
9.14.1.10affected
9.14.1.6affected
9.14.1.15affected
9.14.1.19affected
9.14.1.30affected
9.14.2affected
9.14.2.4affected
9.14.2.8affected
9.14.2.13affected
9.14.2.15affected
9.14.3affected
9.14.3.1affected
9.14.3.9affected
9.14.3.11affected
9.14.3.13affected
9.14.3.18affected
9.14.3.15affected
9.14.4affected
9.14.4.6affected
9.14.4.7affected
9.14.4.12affected
9.14.4.13affected
9.14.4.14affected
9.14.4.15affected
9.14.4.17affected
9.14.4.22affected
9.14.4.23affected
9.14.4.24affected
9.16.1affected
9.16.1.28affected
9.16.2affected
9.16.2.3affected
9.16.2.7affected
9.16.2.11affected
9.16.2.13affected
9.16.2.14affected
9.16.3affected
9.16.3.3affected
9.16.3.14affected
9.16.3.15affected
9.16.3.19affected
9.16.3.23affected
9.16.4affected
9.16.4.9affected
9.16.4.14affected
9.16.4.18affected
9.16.4.19affected
9.16.4.27affected
9.16.4.38affected
9.16.4.39affected
9.16.4.42affected
9.16.4.48affected
9.16.4.55affected
9.16.4.57affected
9.16.4.61affected
9.16.4.62affected
9.16.4.67affected
9.16.4.70affected
9.16.4.71affected
9.16.4.76affected
9.16.4.82affected
9.17.1affected
9.17.1.7affected
9.17.1.9affected
9.17.1.10affected
9.17.1.11affected
9.17.1.13affected
9.17.1.15affected
9.17.1.20affected
9.17.1.30affected
9.17.1.33affected
9.17.1.39affected
9.17.1.45affected
9.17.1.46affected
9.18.1affected
9.18.1.3affected
9.18.2affected
9.18.2.5affected
9.18.2.7affected
9.18.2.8affected
9.18.3affected
9.18.3.39affected
9.18.3.46affected
9.18.3.53affected
9.18.3.55affected
9.18.3.56affected
9.18.4affected
9.18.4.5affected
9.18.4.8affected
9.18.4.22affected
9.18.4.24affected
9.18.4.29affected
9.18.4.34affected
9.18.4.40affected
9.18.4.47affected
9.18.4.50affected
9.18.4.52affected
9.18.4.53affected
9.19.1affected
9.19.1.5affected
9.19.1.9affected
9.19.1.12affected
9.19.1.18affected
9.19.1.22affected
9.19.1.24affected
9.19.1.27affected
9.19.1.28affected
9.19.1.31affected
9.19.1.37affected
9.19.1.38affected
9.20.1affected
9.20.1.5affected
9.20.2affected
9.20.2.10affected
9.20.2.21affected
9.20.2.22affected
9.20.3affected
9.20.3.4affected
9.20.3.7affected
9.20.3.9affected
9.20.3.10affected
9.20.3.13affected
9.22.1.1affected
9.22.1.3affected
9.22.1.2affected
9.22.1.6affected
9.23.1affected

Cisco Cisco IOS XE Software

3.3.0SGaffected
3.3.2SGaffected
3.3.1SGaffected
3.4.0SGaffected
3.4.2SGaffected
3.4.1SGaffected
3.4.3SGaffected
3.4.4SGaffected
3.4.5SGaffected
3.4.6SGaffected
3.4.7SGaffected
3.4.8SGaffected
3.5.0Eaffected
3.5.1Eaffected
3.5.2Eaffected
3.5.3Eaffected
3.6.0Eaffected
3.6.1Eaffected
3.6.2aEaffected
3.6.2Eaffected
3.6.3Eaffected
3.6.4Eaffected
3.6.5Eaffected
3.6.6Eaffected
3.6.5aEaffected
3.6.5bEaffected
3.6.7Eaffected
3.6.8Eaffected
3.6.7bEaffected
3.6.9Eaffected
3.6.10Eaffected
3.7.0Eaffected
3.7.1Eaffected
3.7.2Eaffected
3.7.3Eaffected
3.7.4Eaffected
3.7.5Eaffected
3.8.0Eaffected
3.8.1Eaffected
3.8.2Eaffected
3.8.3Eaffected
3.8.4Eaffected
3.8.5Eaffected
3.8.5aEaffected
3.8.6Eaffected
3.8.7Eaffected
3.8.8Eaffected
3.8.9Eaffected
3.8.10Eaffected
3.18.2aSPaffected
3.9.0Eaffected
3.9.1Eaffected
3.9.2Eaffected
3.10.0Eaffected
3.10.1Eaffected
3.10.0cEaffected
3.10.2Eaffected
3.10.3Eaffected
3.11.0Eaffected
3.11.1Eaffected
3.11.2Eaffected
3.11.3Eaffected
3.11.1aEaffected
3.11.4Eaffected
3.11.3aEaffected
3.11.5Eaffected
3.11.6Eaffected
3.11.7Eaffected
3.11.8Eaffected
3.11.9Eaffected
3.11.10Eaffected
3.11.11Eaffected
3.11.12Eaffected
17.6.1yaffected

Cisco Cisco Firepower Threat Defense Software

6.2.3affected
6.2.3.1affected
6.2.3.2affected
6.2.3.3affected
6.2.3.4affected
6.2.3.5affected
6.2.3.6affected
6.2.3.7affected
6.2.3.8affected
6.2.3.10affected
6.2.3.11affected
6.2.3.9affected
6.2.3.12affected
6.2.3.13affected
6.2.3.14affected
6.2.3.15affected
6.2.3.16affected
6.2.3.17affected
6.2.3.18affected
6.6.0affected
6.6.0.1affected
6.6.1affected
6.6.3affected
6.6.4affected
6.6.5affected
6.6.5.1affected
6.6.5.2affected
6.6.7affected
6.6.7.1affected
6.6.7.2affected
6.4.0affected
6.4.0.1affected
6.4.0.3affected
6.4.0.2affected
6.4.0.4affected
6.4.0.5affected
6.4.0.6affected
6.4.0.7affected
6.4.0.8affected
6.4.0.9affected
6.4.0.10affected
6.4.0.11affected
6.4.0.12affected
6.4.0.13affected
6.4.0.14affected
6.4.0.15affected
6.4.0.16affected
6.4.0.17affected
6.4.0.18affected
7.0.0affected
7.0.0.1affected
7.0.1affected
7.0.1.1affected
7.0.2affected
7.0.2.1affected
7.0.3affected
7.0.4affected
7.0.5affected
7.0.6affected
7.0.6.1affected
7.0.6.2affected
7.0.6.3affected
7.0.7affected
7.1.0affected
7.1.0.1affected
7.1.0.2affected
7.1.0.3affected
7.2.0affected
7.2.0.1affected
7.2.1affected
7.2.2affected
7.2.3affected
7.2.4affected
7.2.4.1affected
7.2.5affected
7.2.5.1affected
7.2.6affected
7.2.7affected
7.2.5.2affected
7.2.8affected
7.2.8.1affected
7.2.9affected
7.3.0affected
7.3.1affected
7.3.1.1affected
7.3.1.2affected
7.4.0affected
7.4.1affected
7.4.1.1affected
7.4.2affected
7.4.2.1affected
7.4.2.2affected
7.6.0affected
7.7.0affected

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-DOESHWHy ↗