CVE-2008-2056: Input Validation

Published Jun 4, 2008

Updated

Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1 allows remote attackers to cause a denial of service (device reload) via a crafted Transport Layer Security (TLS) packet to the device interface.

Affected Software

5 affected components

Cisco Adaptive Security Appliance=8.1

Cisco PIX security appliance=8.0

Cisco PIX security appliance=8.1

Cisco Adaptive Security Appliance Software=8.0

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a00809a8354.shtml

Event History

Jun 4, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2056?

CVE-2008-2056 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2008-2056?

To mitigate CVE-2008-2056, it is recommended to upgrade your Cisco ASA or PIX appliances to version 8.0(3)9 or 8.1(1)1 or later.

What devices are affected by CVE-2008-2056?

CVE-2008-2056 affects Cisco Adaptive Security Appliance versions 8.0.x and 8.1.x, as well as Cisco PIX security appliances on similar versions.

Can CVE-2008-2056 be exploited remotely?

Yes, CVE-2008-2056 can be exploited remotely by attackers sending crafted TLS packets.

What is the impact of exploiting CVE-2008-2056?

Exploiting CVE-2008-2056 can lead to a denial of service condition, resulting in the affected device reloading.