CVE-2008-3817: High severity cisco adaptive security appliance 5500 vulnerability

Published Oct 23, 2008

Updated

Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via an unspecified sequence of packets, related to the "initialization code for the hardware crypto accelerator."

Affected Software

3 affected components

Cisco Adaptive Security Appliance 5500 Series

Cisco PIX security appliance=8.0

Cisco PIX security appliance=8.1

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml

Event History

Oct 23, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3817?

CVE-2008-3817 has been classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2008-3817?

To fix CVE-2008-3817, upgrade your Cisco Adaptive Security Appliance or PIX Security Appliance to versions 8.0(4) or 8.1(2) or later.

What systems are affected by CVE-2008-3817?

CVE-2008-3817 affects Cisco Adaptive Security Appliances 5500 Series and PIX Security Appliances running versions before 8.0(4) and 8.1(2).

What are the consequences of CVE-2008-3817?

The consequences of CVE-2008-3817 include potential denial of service due to remote attackers triggering memory leaks.

Is there a temporary workaround for CVE-2008-3817?

As a temporary workaround for CVE-2008-3817, you may implement traffic filtering to mitigate the impact of the vulnerability until a patch is applied.