CVE-2021-40117

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS packets are not properly processed. An attacker could exploit this vulnerability by sending a crafted SSL/TLS packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

• cisco adaptive security appliance (< 9.8.4.40) • cisco secure firewall threat defense (< 6.2.3.17) • cisco secure firewall threat defense (>= 6.3.0 < 6.4.0.13) • cisco secure firewall threat defense (>= 6.5.0 < 6.6.5) • cisco secure firewall threat defense (>= 6.7.0 < 6.7.0.3) • cisco secure firewall threat defense (>= 7.0.0 < 7.0.1) • cisco adaptive security appliance software (>= 9.9.0 < 9.12.4.26) • cisco adaptive security appliance software (>= 9.13.0 < 9.14.3.9) • cisco adaptive security appliance software (>= 9.15.0 < 9.15.1.17) • cisco adaptive security appliance software (>= 9.16.0 < 9.16.2.3) • cisco asa 5512-x firmware 009.009\(002.085\) • cisco asa 5512-x firmware 009.014\(002.106\) • cisco asa 5505 firmware 009.009\(002.085\) • cisco asa 5505 firmware 009.014\(002.106\) • cisco asa 5515-x firmware 009.009\(002.085\) • cisco asa 5515-x firmware 009.014\(002.106\) • cisco asa 5525-x firmware 009.009\(002.085\) • cisco asa 5525-x firmware 009.014\(002.106\) • cisco asa 5545-x firmware 009.009\(002.085\) • cisco asa 5545-x firmware 009.014\(002.106\) • cisco asa 5555-x firmware 009.009\(002.085\) • cisco asa 5555-x firmware 009.014\(002.106\) • cisco asa 5580 firmware 009.009\(002.085\) • cisco asa 5580 firmware 009.014\(002.106\) • cisco asa 5585-x firmware 009.009\(002.085\) • cisco asa 5585-x firmware 009.014\(002.106\)