CVE-2009-1157: High severity cisco pix vulnerability

Published Apr 9, 2009

Updated

Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before 8.1(2)19 allows remote attackers to cause a denial of service (memory consumption or device reload) via a crafted TCP packet.

Affected Software

10 affected components

cisco PIX=7.0

cisco PIX=8.1

cisco Adaptive Security Appliance 5500=8.1

cisco Adaptive Security Appliance 5500=7.0

cisco PIX=8.0

cisco Adaptive Security Appliance 5500=7.1

cisco Adaptive Security Appliance 5500=7.2

cisco Adaptive Security Appliance 5500=8.0

cisco PIX=7.2

cisco PIX=7.1

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml

Event History

Apr 9, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1157?

CVE-2009-1157 has a severity rating that indicates it allows remote attackers to cause a denial of service through memory consumption.

How do I fix CVE-2009-1157?

To fix CVE-2009-1157, you should update the affected Cisco Adaptive Security Appliances and PIX Security Appliances to the recommended versions that address the memory leak.

Which devices are affected by CVE-2009-1157?

CVE-2009-1157 affects Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances running specific versions prior to their patches.

What is the impact of CVE-2009-1157?

The impact of CVE-2009-1157 includes potential denial of service, leading to memory exhaustion and possible device reload.

Are there any workarounds for CVE-2009-1157?

There are no specific workarounds for CVE-2009-1157; applying the relevant patches is the recommended approach.