Cisco ASA 5500 Series TLS Packet CVE-2010-1581 Denial of Service Vulnerability

Bugtraq ID:	42187
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-1581
Remote:	Yes
Local:	No
Published:	Aug 04 2010 12:00AM
Updated:	Aug 04 2010 08:05PM
Credit:	Cisco
Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.3(0.08) Cisco ASA 5500 Series Adaptive Security Appliance 8.3 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.45) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.17) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0 Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.46) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.45) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(4.44)
Not Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.3(1.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.46) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.19) Cisco ASA 5500 Series Adaptive Security Appliance 7.2(5)

Cisco ASA 5500 Series TLS Packet CVE-2010-1581 Denial of Service Vulnerability

The Cisco Adaptive Security Appliance (ASA) 5500 series is prone to a remote denial-of-service vulnerability because the devices fail to handle exceptional conditions.

An attacker can exploit this issue to cause an affected device to crash and reload, denying service to legitimate users.

This issue being tracked by Cisco bug ID CSCtd32627.

Cisco ASA 5500 Series TLS Packet CVE-2010-1581 Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco ASA 5500 Series TLS Packet CVE-2010-1581 Denial of Service Vulnerability

Solution:
The vendor released an update. Please see the references for more information.

Cisco ASA 5500 Series TLS Packet CVE-2010-1581 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)