CVEvulnerability
CVE-2010-4679
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures, which allows remote OCSP responders to cause a denial of service (TCP socket exhaustion) by rejecting connection attempts, aka Bug ID CSCsz36816.
Affected configurations
• cisco adaptive security appliance software (<= 8.2\(2\))
• cisco adaptive security appliance software 7.0
• cisco adaptive security appliance software 7.0\(0\)
• cisco adaptive security appliance software 7.0\(2\)
• cisco adaptive security appliance software 7.0\(4\)
• cisco adaptive security appliance software 7.0\(5\)
• cisco adaptive security appliance software 7.0\(5.2\)
• cisco adaptive security appliance software 7.0\(6.7\)
• cisco adaptive security appliance software 7.0.1
• cisco adaptive security appliance software 7.0.1.4
• cisco adaptive security appliance software 7.0.2
• cisco adaptive security appliance software 7.0.4
• cisco adaptive security appliance software 7.0.4.3
• cisco adaptive security appliance software 7.0.5
• cisco adaptive security appliance software 7.0.6
• cisco adaptive security appliance software 7.0.7
• cisco adaptive security appliance software 7.0.8
• cisco adaptive security appliance software 7.1
• cisco adaptive security appliance software 7.1\(2\)
• cisco adaptive security appliance software 7.1\(2.5\)
• cisco adaptive security appliance software 7.1\(2.27\)
• cisco adaptive security appliance software 7.1\(2.48\)
• cisco adaptive security appliance software 7.1\(2.49\)
• cisco adaptive security appliance software 7.1\(5\)
• cisco adaptive security appliance software 7.1.1
• cisco adaptive security appliance software 7.1.2
• cisco adaptive security appliance software 7.2
• cisco adaptive security appliance software 7.2\(1\)
• cisco adaptive security appliance software 7.2\(1.22\)
• cisco adaptive security appliance software 7.2\(2\)
• cisco adaptive security appliance software 7.2\(2.5\)
• cisco adaptive security appliance software 7.2\(2.7\)
• cisco adaptive security appliance software 7.2\(2.8\)
• cisco adaptive security appliance software 7.2\(2.10\)
• cisco adaptive security appliance software 7.2\(2.14\)
• cisco adaptive security appliance software 7.2\(2.15\)
• cisco adaptive security appliance software 7.2\(2.16\)
• cisco adaptive security appliance software 7.2\(2.17\)
• cisco adaptive security appliance software 7.2\(2.18\)
• cisco adaptive security appliance software 7.2\(2.19\)
• cisco adaptive security appliance software 7.2\(2.48\)
• cisco adaptive security appliance software 7.2.1
• cisco adaptive security appliance software 7.2.2
• cisco adaptive security appliance software 7.2.3
• cisco adaptive security appliance software 7.2.4
• cisco adaptive security appliance software 7.2.5
• cisco adaptive security appliance software 8.0
• cisco adaptive security appliance software 8.0.2
• cisco adaptive security appliance software 8.0.3
• cisco adaptive security appliance software 8.0.4
• cisco adaptive security appliance software 8.0.5
• cisco adaptive security appliance software 8.2\(1\)
• cisco adaptive security appliance software 8.2.1
• cisco adaptive security appliance software 8.2.2
• cisco 5500 series adaptive security appliance
• cisco asa 5500
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/42931 secunia.com
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf www.cisco.com
- http://www.securityfocus.com/bid/45767 www.securityfocus.com
- http://www.securitytracker.com/id?1024963 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64605 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42931 secunia.com
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf www.cisco.com
- http://www.securityfocus.com/bid/45767 www.securityfocus.com
- http://www.securitytracker.com/id?1024963 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64605 exchange.xforce.ibmcloud.com