CVE-2009-1158: High severity cisco pix vulnerability

Published Apr 9, 2009

Updated

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet.

Affected Software

10 affected components

cisco PIX=7.0

cisco PIX=8.1

cisco Adaptive Security Appliance 5500=8.1

cisco Adaptive Security Appliance 5500=7.0

cisco PIX=8.0

cisco Adaptive Security Appliance 5500=7.1

cisco Adaptive Security Appliance 5500=7.2

cisco Adaptive Security Appliance 5500=8.0

cisco PIX=7.2

cisco PIX=7.1

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml

Event History

Apr 9, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1158?

CVE-2009-1158 is classified as a denial of service vulnerability.

How do I fix CVE-2009-1158?

To mitigate CVE-2009-1158, you should upgrade the Cisco Adaptive Security Appliance or PIX Firewall to a version that has patched this vulnerability.

What devices are affected by CVE-2009-1158?

CVE-2009-1158 affects Cisco Adaptive Security Appliances 5500 Series and Cisco PIX Firewalls running specific versions prior to the recommended patch.

Can CVE-2009-1158 be exploited remotely?

Yes, CVE-2009-1158 allows remote attackers to trigger a denial of service by exploiting H.323 inspection.

What versions of Cisco software are vulnerable to CVE-2009-1158?

Vulnerable versions include 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14.