CVEvulnerability
CVE-2013-5512
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-10-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-362
Description
Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.5), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.4), 9.0.x before 9.0(1.4), and 9.1.x before 9.1(1.2), in certain conditions involving the spoof-server option or ActiveX or Java response inspection, allows remote attackers to cause a denial of service (device reload) via a crafted HTTP response, aka Bug ID CSCud37992.
Affected configurations
• cisco adaptive security appliance software 8.2
• cisco adaptive security appliance software 8.2\(1\)
• cisco adaptive security appliance software 8.2\(2\)
• cisco adaptive security appliance software 8.2\(3\)
• cisco adaptive security appliance software 8.2\(3.9\)
• cisco adaptive security appliance software 8.2\(4\)
• cisco adaptive security appliance software 8.2\(4.1\)
• cisco adaptive security appliance software 8.2\(4.4\)
• cisco adaptive security appliance software 8.2\(5\)
• cisco adaptive security appliance software 8.2\(5.35\)
• cisco adaptive security appliance software 8.2\(5.38\)
• cisco adaptive security appliance software 8.3\(1\)
• cisco adaptive security appliance software 8.3\(2\)
• cisco adaptive security appliance software 8.3\(2.34\)
• cisco adaptive security appliance software 8.3\(2.37\)
• cisco adaptive security appliance software 8.4
• cisco adaptive security appliance software 8.4\(1\)
• cisco adaptive security appliance software 8.4\(1.11\)
• cisco adaptive security appliance software 8.4\(2\)
• cisco adaptive security appliance software 8.4\(2.11\)
• cisco adaptive security appliance software 8.4\(3\)
• cisco adaptive security appliance software 8.4\(4.11\)
• cisco adaptive security appliance software 8.4\(5\)
• cisco adaptive security appliance software 8.5
• cisco adaptive security appliance software 8.5\(1\)
• cisco adaptive security appliance software 8.5\(1.17\)
• cisco adaptive security appliance software 8.6
• cisco adaptive security appliance software 8.6\(1\)
• cisco adaptive security appliance software 8.6\(1.3\)
• cisco adaptive security appliance software 8.6\(1.10\)
• cisco adaptive security appliance software 8.7\(1.3\)
• cisco adaptive security appliance software 9.0
• cisco adaptive security appliance software 9.1
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5512 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5512 Vendor Advisory