Cisco Adaptive Security Appliance Software CVE-2018-0296 Denial of Service Vulnerability

Bugtraq ID:	104612
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-0296
Remote:	Yes
Local:	No
Published:	Jun 06 2018 12:00AM
Updated:	Jun 06 2018 12:00AM
Credit:	Michal Bentkowski of Securitum.
Vulnerable:	Cisco Firepower Threat Defense Software (FTD) 6.2.2 Cisco Firepower Threat Defense Software (FTD) 6.2.1 Cisco Firepower Threat Defense Software 6.2.3 Cisco Firepower Threat Defense Software 6.2.2 Cisco Firepower Threat Defense Software 6.2 Cisco Firepower Threat Defense Software 6.1 Cisco Firepower Threat Defense Software 6.2.2.2 Cisco Firepower Threat Defense Software 6.2.2.1 Cisco Firepower Threat Defense Software 6.2.1 Cisco Firepower Threat Defense Software 6.2.0.5 Cisco Firepower Threat Defense Software 6.1.0.6 Cisco Firepower Threat Defense Software 6.1.0.5 Cisco Firepower Threat Defense Software 6.0.1.4 Cisco Firepower Threat Defense Software 6.0.1 Cisco Firepower Threat Defense Software 6.0 Cisco ASA 5500 Series Adaptive Security Appliances 0 Cisco Adaptive Security Appliance (ASA) Software 9.6.3 Cisco Adaptive Security Appliance (ASA) Software 9.4.4 Cisco Adaptive Security Appliance (ASA) Software 9.4.1 Cisco Adaptive Security Appliance (ASA) Software 9.3.3 Cisco Adaptive Security Appliance (ASA) Software 9.3.2 Cisco Adaptive Security Appliance (ASA) Software 9.3.1 1 Cisco Adaptive Security Appliance (ASA) Software 9.3.1 Cisco Adaptive Security Appliance (ASA) Software 9.2.8 Cisco Adaptive Security Appliance (ASA) Software 9.2.3 Cisco Adaptive Security Appliance (ASA) Software 9.2.2 7 Cisco Adaptive Security Appliance (ASA) Software 9.2.2 4 Cisco Adaptive Security Appliance (ASA) Software 9.2.2 Cisco Adaptive Security Appliance (ASA) Software 9.2.1 Cisco Adaptive Security Appliance (ASA) Software 9.1.7 Cisco Adaptive Security Appliance (ASA) Software 9.1.5 15 Cisco Adaptive Security Appliance (ASA) Software 9.1.5 12 Cisco Adaptive Security Appliance (ASA) Software 9.1.5 10 Cisco Adaptive Security Appliance (ASA) Software 9.1.5 Cisco Adaptive Security Appliance (ASA) Software 9.1.4 Cisco Adaptive Security Appliance (ASA) Software 9.1.3 4 Cisco Adaptive Security Appliance (ASA) Software 9.1.1 5 Cisco Adaptive Security Appliance (ASA) Software 9.1.1 4.5 Cisco Adaptive Security Appliance (ASA) Software 9.1.1 3.2 Cisco Adaptive Security Appliance (ASA) Software 9.1.1 3 Cisco Adaptive Security Appliance (ASA) Software 9.1.1 2.8 Cisco Adaptive Security Appliance (ASA) Software 9.1.1 2 Cisco Adaptive Security Appliance (ASA) Software 9.1.1 1.4 Cisco Adaptive Security Appliance (ASA) Software 9.0.4 5 Cisco Adaptive Security Appliance (ASA) Software 9.0.4 Cisco Adaptive Security Appliance (ASA) Software 9.0.3 Cisco Adaptive Security Appliance (ASA) Software 9.0.2 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.7 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.5 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.24 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.20 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.17 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.1 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 3.6 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 3 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 2.10 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 2 Cisco Adaptive Security Appliance (ASA) Software 9.9 Cisco Adaptive Security Appliance (ASA) Software 9.8 Cisco Adaptive Security Appliance (ASA) Software 9.7(1) Cisco Adaptive Security Appliance (ASA) Software 9.7(0.99) Cisco Adaptive Security Appliance (ASA) Software 9.7 Cisco Adaptive Security Appliance (ASA) Software 9.6.4(6) Cisco Adaptive Security Appliance (ASA) Software 9.6.4(3) Cisco Adaptive Security Appliance (ASA) Software 9.6.3.20 Cisco Adaptive Security Appliance (ASA) Software 9.6.3.17 Cisco Adaptive Security Appliance (ASA) Software 9.6.3(1) Cisco Adaptive Security Appliance (ASA) Software 9.6.2.9 Cisco Adaptive Security Appliance (ASA) Software 9.6.2.21 Cisco Adaptive Security Appliance (ASA) Software 9.6.2 Cisco Adaptive Security Appliance (ASA) Software 9.6.1(11) Cisco Adaptive Security Appliance (ASA) Software 9.6(3) Cisco Adaptive Security Appliance (ASA) Software 9.6(2.99) Cisco Adaptive Security Appliance (ASA) Software 9.6(2.10) Cisco Adaptive Security Appliance (ASA) Software 9.6(1.5) Cisco Adaptive Security Appliance (ASA) Software 9.6 Cisco Adaptive Security Appliance (ASA) Software 9.5.3.9 Cisco Adaptive Security Appliance (ASA) Software 9.5.3.7 Cisco Adaptive Security Appliance (ASA) Software 9.5.2.8 Cisco Adaptive Security Appliance (ASA) Software 9.5.2.7 Cisco Adaptive Security Appliance (ASA) Software 9.5(3) Cisco Adaptive Security Appliance (ASA) Software 9.5(2.6) Cisco Adaptive Security Appliance (ASA) Software 9.5(2.2) Cisco Adaptive Security Appliance (ASA) Software 9.5(2) Cisco Adaptive Security Appliance (ASA) Software 9.5(1.4) Cisco Adaptive Security Appliance (ASA) Software 9.5 Cisco Adaptive Security Appliance (ASA) Software 9.4.4.6 Cisco Adaptive Security Appliance (ASA) Software 9.4.4.14 Cisco Adaptive Security Appliance (ASA) Software 9.4.4.13 Cisco Adaptive Security Appliance (ASA) Software 9.4.3.3 Cisco Adaptive Security Appliance (ASA) Software 9.4.3.2 Cisco Adaptive Security Appliance (ASA) Software 9.4.3.1 Cisco Adaptive Security Appliance (ASA) Software 9.4.3(8) Cisco Adaptive Security Appliance (ASA) Software 9.4.2.6 Cisco Adaptive Security Appliance (ASA) Software 9.4.(0.115) Cisco Adaptive Security Appliance (ASA) Software 9.4(4) Cisco Adaptive Security Appliance (ASA) Software 9.4(3.6) Cisco Adaptive Security Appliance (ASA) Software 9.4(2.6) Cisco Adaptive Security Appliance (ASA) Software 9.4(2.4) Cisco Adaptive Security Appliance (ASA) Software 9.4(2) Cisco Adaptive Security Appliance (ASA) Software 9.4 (1.1) Cisco Adaptive Security Appliance (ASA) Software 9.4 Cisco Adaptive Security Appliance (ASA) Software 9.3.3.8 Cisco Adaptive Security Appliance (ASA) Software 9.3.3(10) Cisco Adaptive Security Appliance (ASA) Software 9.3(3.9) Cisco Adaptive Security Appliance (ASA) Software 9.3(3.8) Cisco Adaptive Security Appliance (ASA) Software 9.3(3.7) Cisco Adaptive Security Appliance (ASA) Software 9.3(3.11) Cisco Adaptive Security Appliance (ASA) Software 9.3(3) Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) Cisco Adaptive Security Appliance (ASA) Software 9.3(2.100) Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50) Cisco Adaptive Security Appliance (ASA) Software 9.3(1.105) Cisco Adaptive Security Appliance (ASA) Software 9.3(1.1) Cisco Adaptive Security Appliance (ASA) Software 9.3 Cisco Adaptive Security Appliance (ASA) Software 9.2.4.6 Cisco Adaptive Security Appliance (ASA) Software 9.2.4(14) Cisco Adaptive Security Appliance (ASA) Software 9.2.3.3 Cisco Adaptive Security Appliance (ASA) Software 9.2.2.8 Cisco Adaptive Security Appliance (ASA) Software 9.2.(3.1) Cisco Adaptive Security Appliance (ASA) Software 9.2(4.8) Cisco Adaptive Security Appliance (ASA) Software 9.2(4.6) Cisco Adaptive Security Appliance (ASA) Software 9.2(4.5) Cisco Adaptive Security Appliance (ASA) Software 9.2(4.13) Cisco Adaptive Security Appliance (ASA) Software 9.2(4.11) Cisco Adaptive Security Appliance (ASA) Software 9.2(4.1) Cisco Adaptive Security Appliance (ASA) Software 9.2(3.4) Cisco Adaptive Security Appliance (ASA) Software 9.2(3.1) Cisco Adaptive Security Appliance (ASA) Software 9.2(2.6) Cisco Adaptive Security Appliance (ASA) Software 9.2(2.4) Cisco Adaptive Security Appliance (ASA) Software 9.2(2)8 Cisco Adaptive Security Appliance (ASA) Software 9.2(2) Cisco Adaptive Security Appliance (ASA) Software 9.2(0.104) Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0) Cisco Adaptive Security Appliance (ASA) Software 9.2 Cisco Adaptive Security Appliance (ASA) Software 9.1.7.20 Cisco Adaptive Security Appliance (ASA) Software 9.1.7.17 Cisco Adaptive Security Appliance (ASA) Software 9.1.7(9) Cisco Adaptive Security Appliance (ASA) Software 9.1.7(19) Cisco Adaptive Security Appliance (ASA) Software 9.1.7(16) Cisco Adaptive Security Appliance (ASA) Software 9.1.5.21 Cisco Adaptive Security Appliance (ASA) Software 9.1.4.5 Cisco Adaptive Security Appliance (ASA) Software 9.1.3.2 Cisco Adaptive Security Appliance (ASA) Software 9.1.3 Cisco Adaptive Security Appliance (ASA) Software 9.1.2.8 Cisco Adaptive Security Appliance (ASA) Software 9.1.2 Cisco Adaptive Security Appliance (ASA) Software 9.1.1.5 Cisco Adaptive Security Appliance (ASA) Software 9.1.1.4.5 Cisco Adaptive Security Appliance (ASA) Software 9.1.1.4 Cisco Adaptive Security Appliance (ASA) Software 9.1.1.3.2 Cisco Adaptive Security Appliance (ASA) Software 9.1.1 Cisco Adaptive Security Appliance (ASA) Software 9.1(7.7) Cisco Adaptive Security Appliance (ASA) Software 9.1(7.6) Cisco Adaptive Security Appliance (ASA) Software 9.1(7.16) Cisco Adaptive Security Appliance (ASA) Software 9.1(7.13) Cisco Adaptive Security Appliance (ASA) Software 9.1(7) Cisco Adaptive Security Appliance (ASA) Software 9.1(6.9) Cisco Adaptive Security Appliance (ASA) Software 9.1(6.2) Cisco Adaptive Security Appliance (ASA) Software 9.1(6.1) Cisco Adaptive Security Appliance (ASA) Software 9.1(6) Cisco Adaptive Security Appliance (ASA) Software 9.1(5.7) Cisco Adaptive Security Appliance (ASA) Software 9.1(5.12) Cisco Adaptive Security Appliance (ASA) Software 9.1(5.106) Cisco Adaptive Security Appliance (ASA) Software 9.1(5.1) Cisco Adaptive Security Appliance (ASA) Software 9.1(4.5) Cisco Adaptive Security Appliance (ASA) Software 9.1(4.3) Cisco Adaptive Security Appliance (ASA) Software 9.1(3.4) Cisco Adaptive Security Appliance (ASA) Software 9.1(3.2) Cisco Adaptive Security Appliance (ASA) Software 9.1(3) Cisco Adaptive Security Appliance (ASA) Software 9.1(2.8) Cisco Adaptive Security Appliance (ASA) Software 9.1(2.5) Cisco Adaptive Security Appliance (ASA) Software 9.1(2) Cisco Adaptive Security Appliance (ASA) Software 9.1(1.8) Cisco Adaptive Security Appliance (ASA) Software 9.1(1.7) Cisco Adaptive Security Appliance (ASA) Software 9.1(1.2) Cisco Adaptive Security Appliance (ASA) Software 9.1 .5.21 Cisco Adaptive Security Appliance (ASA) Software 9.1 Cisco Adaptive Security Appliance (ASA) Software 9.0.4.7 Cisco Adaptive Security Appliance (ASA) Software 9.0.4.29 Cisco Adaptive Security Appliance (ASA) Software 9.0.4.26 Cisco Adaptive Security Appliance (ASA) Software 9.0.4.24 Cisco Adaptive Security Appliance (ASA) Software 9.0.4.20 Cisco Adaptive Security Appliance (ASA) Software 9.0.4.17 Cisco Adaptive Security Appliance (ASA) Software 9.0.4.1 Cisco Adaptive Security Appliance (ASA) Software 9.0.4(40) Cisco Adaptive Security Appliance (ASA) Software 9.0.3.8 Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 Cisco Adaptive Security Appliance (ASA) Software 9.0.2.10 Cisco Adaptive Security Appliance (ASA) Software 9.0.1.4.5 Cisco Adaptive Security Appliance (ASA) Software 9.0.1.4.1 Cisco Adaptive Security Appliance (ASA) Software 9.0.1.4 Cisco Adaptive Security Appliance (ASA) Software 9.0.1.3.8 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 3.8 Cisco Adaptive Security Appliance (ASA) Software 9.0.1 Cisco Adaptive Security Appliance (ASA) Software 9.0(4.8) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.42) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.39) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.38) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.33) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.32) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.29) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.21) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.13) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.1) Cisco Adaptive Security Appliance (ASA) Software 9.0(3.8) Cisco Adaptive Security Appliance (ASA) Software 9.0(3.6) Cisco Adaptive Security Appliance (ASA) Software 9.0(3.3) Cisco Adaptive Security Appliance (ASA) Software 9.0(3.10) Cisco Adaptive Security Appliance (ASA) Software 9.0(3.1) Cisco Adaptive Security Appliance (ASA) Software 9.0(2.6) Cisco Adaptive Security Appliance (ASA) Software 9.0(2.10) Cisco Adaptive Security Appliance (ASA) Software 9.0(1.4) Cisco Adaptive Security Appliance (ASA) Software 9.0
Not Vulnerable:	Cisco Firepower Threat Defense Software (FTD) 6.2.2.3 Cisco Adaptive Security Appliance (ASA) Software 9.9.2.1 Cisco Adaptive Security Appliance (ASA) Software 9.8.2.28 Cisco Adaptive Security Appliance (ASA) Software 9.7.1.24 Cisco Adaptive Security Appliance (ASA) Software 9.6.4.8 Cisco Adaptive Security Appliance (ASA) Software 9.4.4.18 Cisco Adaptive Security Appliance (ASA) Software 9.2.4.33 Cisco Adaptive Security Appliance (ASA) Software 9.1.7.29

Cisco Adaptive Security Appliance Software CVE-2018-0296 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Adaptive Security Appliance Software CVE-2018-0296 Denial of Service Vulnerability

References:

• Cisco Adaptive Security Appliance - Path Traversal (Yassine Aboukir)
  
• Cisco Homepage (Cisco )
  
• Cisco Adaptive Security Appliance Web Services Denial of Service Vulnerability (Cisco)
  
• ICSA-18-184-01: Rockwell Automation Allen-Bradley Stratix 5950 (ICS CERT)
  
• Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) (Yassineaboukir)