CVE-2016-6407

Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.

• cisco web security appliance 5.6.0-623 • cisco web security appliance 6.0.0-000 • cisco web security appliance 7.1.0 • cisco web security appliance 7.1.1 • cisco web security appliance 7.1.2 • cisco web security appliance 7.1.3 • cisco web security appliance 7.1.4 • cisco web security appliance 7.5.0-000 • cisco web security appliance 7.5.0-825 • cisco web security appliance 7.5.1-000 • cisco web security appliance 7.5.2-000 • cisco web security appliance 7.5.2-hp2-303 • cisco web security appliance 7.7.0-000 • cisco web security appliance 7.7.0-608 • cisco web security appliance 7.7.1-000 • cisco web security appliance 7.7.5-835 • cisco web security appliance 8.0.0-000 • cisco web security appliance 8.0.5 • cisco web security appliance 8.0.6 • cisco web security appliance 8.0.6-078 • cisco web security appliance 8.0.6-119 • cisco web security appliance 8.0.7 • cisco web security appliance 8.0.7-142 • cisco web security appliance 8.0.8-mr-113 • cisco web security appliance 8.5.0-497 • cisco web security appliance 8.5.0.000 • cisco web security appliance 8.5.1-021 • cisco web security appliance 8.5.2-024 • cisco web security appliance 8.5.2-027 • cisco web security appliance 8.5.3-055 • cisco web security appliance 8.8.0-000 • cisco web security appliance 8.8.0-085 • cisco web security appliance 9.0.0-193 • cisco web security appliance 9.0 base • cisco web security appliance 9.1.0-000 • cisco web security appliance 9.1.0-070 • cisco web security appliance 9.1 base • cisco web security appliance 9.5.0-235 • cisco web security appliance 9.5.0-284 • cisco web security appliance 9.5.0-444 • cisco web security appliance 9.5 base