CVE-2009-4918: Input Validation
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4918?
CVE-2009-4918 is classified with a moderate severity due to its potential to cause denial of service.
How do I fix CVE-2009-4918?
To fix CVE-2009-4918, upgrade to Cisco ASA software version 8.1(2) or later.
What devices are affected by CVE-2009-4918?
CVE-2009-4918 affects Cisco Adaptive Security Appliances (ASA) 5580 series running software before version 8.1(2).
What type of attack does CVE-2009-4918 allow?
CVE-2009-4918 allows remote attackers to perform a denial of service by sending malformed NAT-T packets.
What are NAT-T packets in relation to CVE-2009-4918?
NAT-T (Network Address Translation Traversal) packets are used in IPsec IPSec VPN to negotiate a secure tunnel, and malformed packets can exploit this vulnerability.