Cisco AsyncOS Software CVE-2017-12215 Remote Denial of Service Vulnerability

Bugtraq ID:	100920
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-12215
Remote:	Yes
Local:	No
Published:	Sep 20 2017 12:00AM
Updated:	Sep 20 2017 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IronPort X1070 Messaging Gateway(tm) Appliance 9.7.2-065 Cisco Email Security Appliance(ESA) 9.7.2-065 Cisco Email Security Appliance 9.7.1-066 Cisco Email Security Appliance 10.0.1-087 Cisco Email Security Appliance 10.0.0-203 Cisco AsyncOS Software 0
Not Vulnerable:	Cisco Email Security Appliance 9.8.1-015 Cisco Email Security Appliance 11.0.0-264 Cisco Email Security Appliance 10.0.2-020

Cisco AsyncOS Software CVE-2017-12215 Remote Denial of Service Vulnerability

Cisco AsyncOS Software for Email Security Appliances is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected process to restart or crash, resulting in a denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCvd29354.

Cisco AsyncOS Software CVE-2017-12215 Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco AsyncOS Software CVE-2017-12215 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco AsyncOS Software CVE-2017-12215 Remote Denial of Service Vulnerability

References:

• Cisco Email Security Appliance Homepage (Cisco)
  
• Cisco Homepage (Cisco )
  
• Cisco Email Security Appliance Denial of Service Vulnerability (Cisco)