CVE-2008-2734: High severity cisco adaptive security appliance 5500 vulnerability
Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2734?
The severity of CVE-2008-2734 is considered high due to its potential to cause denial of service affects in affected devices.
How do I fix CVE-2008-2734?
To fix CVE-2008-2734, upgrade your Cisco Adaptive Security Appliance 5500 devices to the latest firmware version recommended by Cisco.
What are the affected versions in CVE-2008-2734?
CVE-2008-2734 affects Cisco Adaptive Security Appliance 5500 devices running versions 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4.
What types of attacks are possible with CVE-2008-2734?
CVE-2008-2734 allows remote attackers to exploit the memory leak to cause denial of service by consuming memory resources.
How can I determine if my device is vulnerable to CVE-2008-2734?
You can determine if your device is vulnerable to CVE-2008-2734 by checking its version against the affected versions listed in the advisory.