CVE-2009-1158
First published: Thu Apr 09 2009(Updated: )
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance 5500 | =7.0 | |
| Cisco Adaptive Security Appliance 5500 | =7.1 | |
| Cisco Adaptive Security Appliance 5500 | =7.2 | |
| Cisco Adaptive Security Appliance 5500 | =8.0 | |
| Cisco Adaptive Security Appliance 5500 | =8.1 | |
| Cisco PIX Firewall | =7.0 | |
| Cisco PIX Firewall | =7.1 | |
| Cisco PIX Firewall | =7.2 | |
| Cisco PIX Firewall | =8.0 | |
| Cisco PIX Firewall | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-1158?
CVE-2009-1158 is classified as a denial of service vulnerability.
How do I fix CVE-2009-1158?
To mitigate CVE-2009-1158, you should upgrade the Cisco Adaptive Security Appliance or PIX Firewall to a version that has patched this vulnerability.
What devices are affected by CVE-2009-1158?
CVE-2009-1158 affects Cisco Adaptive Security Appliances 5500 Series and Cisco PIX Firewalls running specific versions prior to the recommended patch.
Can CVE-2009-1158 be exploited remotely?
Yes, CVE-2009-1158 allows remote attackers to trigger a denial of service by exploiting H.323 inspection.
What versions of Cisco software are vulnerable to CVE-2009-1158?
Vulnerable versions include 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco pix
- version/cisco pix/7.0
- version/cisco pix/8.1
- canonical/cisco adaptive security appliance 5500
- version/cisco adaptive security appliance 5500/8.1
- version/cisco adaptive security appliance 5500/7.0
- version/cisco pix/8.0
- version/cisco adaptive security appliance 5500/7.1
- version/cisco adaptive security appliance 5500/7.2
- version/cisco adaptive security appliance 5500/8.0
- version/cisco pix/7.2
- version/cisco pix/7.1