Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service (traffic loop and device crash) via a packet that triggers multiple matches, aka Bug ID CSCui45606.
The product does not properly control the allocation and maintenance of a limited resource.
Link | Tags |
---|---|
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5567 | vendor advisory broken link |
http://tools.cisco.com/security/center/viewAlert.x?alertId=34911 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/94445 | third party advisory vdb entry |
http://www.securitytracker.com/id/1030555 | broken link third party advisory vdb entry |
http://www.securityfocus.com/bid/68504 | third party advisory vdb entry |