CoreCVE
Back

HIGH

Cisco Adaptive Security Appliance (ASA) Software 8.4.x before 8.4(3) and 8.6.x before 8.6(1.3) does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service (memory consumption, and forwarding outage or system hang) via packets to the disconnected machine's IP address, aka Bug ID CSCtt36737

Published Oct 13, 2013

Description

Cisco Adaptive Security Appliance (ASA) Software 8.4.x before 8.4(3) and 8.6.x before 8.6(1.3) does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service (memory consumption, and forwarding outage or system hang) via packets to the disconnected machine's IP address, aka Bug ID CSCtt36737.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner cisco
Published Oct 13, 2013
Updated Aug 6, 2024
Reserved May 6, 2013
Link CVE-2013-3415
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2013-3415
Red Hat
Severity n/a
Public date n/a
Links CVE-2013-3415
ENISA EUVD
Assigner cisco
Published Oct 13, 2013
Updated Aug 6, 2024
Exploited since n/a
Link EUVD-2013-3350
EUVD-2013-3350