Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3385 Denial of Service Vulnerability

Bugtraq ID:	70298
Class:	Race Condition Error
CVE:	CVE-2014-3385
Remote:	Yes
Local:	No
Published:	Oct 08 2014 12:00AM
Updated:	Oct 08 2014 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3385 Denial of Service Vulnerability

Cisco Adaptive Security Appliance (ASA) Software is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users.

This issue is tracked by Cisco Bug ID CSCum00556.

Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3385 Denial of Service Vulnerability

Attackers can use readily available network utilities to exploit this issue.

Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3385 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3385 Denial of Service Vulnerability

References:

• Cisco ASA High Performance Monitor Denial of Service Vulnerability (Cisco)
  
• Cisco Homepage (Cisco)
  
• Multiple Vulnerabilities in Cisco ASA Software (Cisco)