Cisco Adaptive Security Appliance (ASA) Software CVE-2015-0677 Denial of Service Vulnerability

Bugtraq ID:	73967
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-0677
Remote:	Yes
Local:	No
Published:	Apr 08 2015 12:00AM
Updated:	Apr 16 2015 06:04PM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Adaptive Security Appliance (ASA) Software CVE-2015-0677 Denial of Service Vulnerability

Cisco Adaptive Security Appliance (ASA) Software is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the WebVPN component, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCus95290.

Cisco Adaptive Security Appliance (ASA) Software CVE-2015-0677 Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco Adaptive Security Appliance (ASA) Software CVE-2015-0677 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Adaptive Security Appliance (ASA) Software CVE-2015-0677 Denial of Service Vulnerability

References:

• Cisco ASA Software VPN XML Parser Denial of Service Vulnerability (Cisco)
  
• Cisco Homepage (Cisco )
  
• Multiple Vulnerabilities in Cisco ASA Software (Cisco)