CVEvulnerability

CVE-2014-3391

6.8 MEDIUM Published 2014-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to library use after device reload because of an incorrect LD_LIBRARY_PATH value, aka Bug ID CSCtq52661.

Affected configurations

• cisco adaptive security appliance software 8.7.8 • cisco adaptive security appliance software 8.2.0.45 • cisco adaptive security appliance software 8.2.1 • cisco adaptive security appliance software 8.2.1.1 • cisco adaptive security appliance software 8.2.2 • cisco adaptive security appliance software 8.2.2.10 • cisco adaptive security appliance software 8.2.2.12 • cisco adaptive security appliance software 8.2.2.16 • cisco adaptive security appliance software 8.2.2.17 • cisco adaptive security appliance software 8.2.3 • cisco adaptive security appliance software 8.2.4 • cisco adaptive security appliance software 8.2.4.1 • cisco adaptive security appliance software 8.2.4.4 • cisco adaptive security appliance software 8.2.5 • cisco adaptive security appliance software 8.2.5.13 • cisco adaptive security appliance software 8.2.5.22 • cisco adaptive security appliance software 8.2.5.26 • cisco adaptive security appliance software 8.2.5.33 • cisco adaptive security appliance software 8.2.5.40 • cisco adaptive security appliance software 8.2.5.41 • cisco adaptive security appliance software 8.2.5.46 • cisco adaptive security appliance software 8.2.5.48 • cisco adaptive security appliance software 8.2.5.50 • cisco adaptive security appliance software 8.3.1 • cisco adaptive security appliance software 8.3.1.1 • cisco adaptive security appliance software 8.3.1.4 • cisco adaptive security appliance software 8.3.1.6 • cisco adaptive security appliance software 8.3.2 • cisco adaptive security appliance software 8.3.2.4 • cisco adaptive security appliance software 8.3.2.13 • cisco adaptive security appliance software 8.3.2.23 • cisco adaptive security appliance software 8.3.2.25 • cisco adaptive security appliance software 8.3.2.31 • cisco adaptive security appliance software 8.3.2.33 • cisco adaptive security appliance software 8.3.2.34 • cisco adaptive security appliance software 8.3.2.37 • cisco adaptive security appliance software 8.3.2.39 • cisco adaptive security appliance software 8.3.2.40 • cisco adaptive security appliance software 8.3.2.41 • cisco adaptive security appliance software 8.4.1 • cisco adaptive security appliance software 8.4.1.3 • cisco adaptive security appliance software 8.4.1.11 • cisco adaptive security appliance software 8.4.2 • cisco adaptive security appliance software 8.4.2.1 • cisco adaptive security appliance software 8.4.2.8 • cisco adaptive security appliance software 8.4.3 • cisco adaptive security appliance software 8.4.3.8 • cisco adaptive security appliance software 8.4.3.9 • cisco adaptive security appliance software 8.4.4 • cisco adaptive security appliance software 8.4.4.1 • cisco adaptive security appliance software 8.4.4.3 • cisco adaptive security appliance software 8.4.4.5 • cisco adaptive security appliance software 8.4.4.9 • cisco adaptive security appliance software 8.4.5 • cisco adaptive security appliance software 8.4.5.6 • cisco adaptive security appliance software 8.4.6 • cisco adaptive security appliance software 8.4.7 • cisco adaptive security appliance software 8.4.7.3 • cisco adaptive security appliance software 8.4.7.15 • cisco adaptive security appliance software 8.4.7.22 … and 6 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References