CVEvulnerability

CVE-2016-6437

5.9 MEDIUM Published 2016-10-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-10-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-399

Description

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).

Affected configurations

• cisco wide area application services 5.3.1 • cisco wide area application services 5.3.3 • cisco wide area application services 5.3.5 • cisco wide area application services 5.3.5a • cisco wide area application services 5.3.5b • cisco wide area application services 5.3.5c • cisco wide area application services 5.3.5d • cisco wide area application services 5.3.5e • cisco wide area application services 5.3.5f • cisco wide area application services 6.1.0 • cisco wide area application services 6.1.1 • cisco wide area application services 6.2.1 • cisco wide area application services 6.2.1a

Related

Weakness · not in database (1)

References