CVE-2010-0149: High severity Cisco ASA 5500 vulnerability
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0149?
CVE-2010-0149 is classified as a denial of service vulnerability that allows remote attackers to prevent new connections.
How do I fix CVE-2010-0149?
To mitigate CVE-2010-0149, upgrade your Cisco ASA 5500 or PIX 500 Series Security Appliance to a version that is later than those specified.
Which devices are affected by CVE-2010-0149?
CVE-2010-0149 affects Cisco ASA 5500 Series Adaptive Security Appliances running versions 7.2, 8.0, 8.1, and 8.2, as well as Cisco PIX 500 Series Security Appliances.
What version of Cisco ASA is vulnerable to CVE-2010-0149?
Versions of Cisco ASA 5500 Series Adaptive Security Appliance prior to 7.2(4.46), 8.0(4.38), 8.1(2.29), and 8.2(1.5) are vulnerable to CVE-2010-0149.
What kind of attack can exploit CVE-2010-0149?
CVE-2010-0149 can be exploited by remote attackers to launch denial of service attacks that prevent new connections to the affected devices.