Cisco ASA 5500 Series SIP Inspection (CVE-2010-2816) Denial of Service Vulnerability

Bugtraq ID:	42189
Class:	Design Error
CVE:	CVE-2010-2816
Remote:	Yes
Local:	No
Published:	Aug 04 2010 12:00AM
Updated:	Aug 04 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.5) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.16) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.2(1.10) Cisco ASA 5500 Series Adaptive Security Appliance 8.2 Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.40) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.39) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.37) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.35) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.29) Cisco ASA 5500 Series Adaptive Security Appliance 8.1 Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.7) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.6) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.2) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.15) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.1) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.44) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(4.38) Cisco ASA 5500 Series Adaptive Security Appliance 8.0
Not Vulnerable:	Cisco ASA 5500 Series Adaptive Security Appliance 8.2(2.13) Cisco ASA 5500 Series Adaptive Security Appliance 8.1(2.45) Cisco ASA 5500 Series Adaptive Security Appliance 8.0(5.17)

Cisco ASA 5500 Series SIP Inspection (CVE-2010-2816) Denial of Service Vulnerability

Cisco ASA 5500 series security appliances are prone to a denial-of-service vulnerability that affects the 'SIP' inspection feature.

An attacker can exploit this issue to cause a vulnerable device to reload, triggering a denial-of-service condition.

This issue is tracked by Cisco Bug ID CSCtd32106.

Cisco ASA 5500 Series SIP Inspection (CVE-2010-2816) Denial of Service Vulnerability

Attackers can use readily available networking tools to exploit this issue.

Cisco ASA 5500 Series SIP Inspection (CVE-2010-2816) Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco ASA 5500 Series SIP Inspection (CVE-2010-2816) Denial of Service Vulnerability

References:

• Cisco ASA 5500 Series Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adapt (Cisco)