Security Advisory

CVE-2014-3407

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-11-28 02:00:00

Last updated 2024-08-06 10:43:05

Assigner cisco

CVSS score not scored

State PUBLISHED

Description

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCuq68888.

← Browse all CVEs View on cve.org ↗