CVEvulnerability
CVE-2014-3407
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-11-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-400
Description
The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCuq68888.
Affected configurations
• cisco adaptive security appliance software (<= 9.3\(2\))
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3407 Broken Link, Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36542 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3407 Broken Link, Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36542 Vendor Advisory