CVEvulnerability

CVE-2016-1385

6.5 MEDIUM Published 2016-05-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-05-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
Weaknesses
CWE-119, CWE-399

Description

The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (instability, memory consumption, or device reload) by leveraging (1) administrative access or (2) Clientless SSL VPN access to provide a crafted XML document, aka Bug ID CSCut14209.

Affected configurations

• cisco adaptive security appliance software 8.4.0 • cisco adaptive security appliance software 8.4.1 • cisco adaptive security appliance software 8.4.1.3 • cisco adaptive security appliance software 8.4.1.11 • cisco adaptive security appliance software 8.4.2 • cisco adaptive security appliance software 8.4.2.1 • cisco adaptive security appliance software 8.4.2.8 • cisco adaptive security appliance software 8.4.3 • cisco adaptive security appliance software 8.4.3.8 • cisco adaptive security appliance software 8.4.3.9 • cisco adaptive security appliance software 8.4.4 • cisco adaptive security appliance software 8.4.4.1 • cisco adaptive security appliance software 8.4.4.3 • cisco adaptive security appliance software 8.4.4.5 • cisco adaptive security appliance software 8.4.4.9 • cisco adaptive security appliance software 8.4.5 • cisco adaptive security appliance software 8.4.5.6 • cisco adaptive security appliance software 8.4.6 • cisco adaptive security appliance software 8.4.7 • cisco adaptive security appliance software 8.4.7.3 • cisco adaptive security appliance software 8.4.7.15 • cisco adaptive security appliance software 8.4.7.22 • cisco adaptive security appliance software 8.4.7.23 • cisco adaptive security appliance software 8.4.7.26 • cisco adaptive security appliance software 8.4.7.28 • cisco adaptive security appliance software 8.4.7.29 • cisco adaptive security appliance software 8.5.1 • cisco adaptive security appliance software 8.5.1.1 • cisco adaptive security appliance software 8.5.1.6 • cisco adaptive security appliance software 8.5.1.7 • cisco adaptive security appliance software 8.5.1.14 • cisco adaptive security appliance software 8.5.1.17 • cisco adaptive security appliance software 8.5.1.18 • cisco adaptive security appliance software 8.5.1.19 • cisco adaptive security appliance software 8.5.1.21 • cisco adaptive security appliance software 8.5.1.24 • cisco adaptive security appliance software 8.6.1 • cisco adaptive security appliance software 8.6.1.1 • cisco adaptive security appliance software 8.6.1.2 • cisco adaptive security appliance software 8.6.1.5 • cisco adaptive security appliance software 8.6.1.10 • cisco adaptive security appliance software 8.6.1.12 • cisco adaptive security appliance software 8.6.1.13 • cisco adaptive security appliance software 8.6.1.14 • cisco adaptive security appliance software 8.6.1.17 • cisco adaptive security appliance software 8.7.1 • cisco adaptive security appliance software 8.7.1.1 • cisco adaptive security appliance software 8.7.1.3 • cisco adaptive security appliance software 8.7.1.4 • cisco adaptive security appliance software 8.7.1.7 • cisco adaptive security appliance software 8.7.1.8 • cisco adaptive security appliance software 8.7.1.11 • cisco adaptive security appliance software 8.7.1.13 • cisco adaptive security appliance software 8.7.1.16 • cisco adaptive security appliance software 8.7.1.17 • cisco adaptive security appliance software 9.0.1 • cisco adaptive security appliance software 9.0.2 • cisco adaptive security appliance software 9.0.2.10 • cisco adaptive security appliance software 9.0.3 • cisco adaptive security appliance software 9.0.3.6 … and 70 more

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References