CVE-2010-4676: Medium severity Cisco Adaptive Security Appliance Software vulnerability

Q: What is the severity of CVE-2010-4676?

CVE-2010-4676 has a high severity rating due to its potential to cause a denial of service through excessive IPsec traffic.

Q: How do I fix CVE-2010-4676?

To fix CVE-2010-4676, upgrade to a Cisco Adaptive Security Appliance software version that is 8.2(3) or later.

Q: What devices are affected by CVE-2010-4676?

CVE-2010-4676 affects Cisco Adaptive Security Appliance 5500 series devices running versions prior to 8.2(3) and specific earlier versions of the software.

Q: What type of attack does CVE-2010-4676 facilitate?

CVE-2010-4676 facilitates a denial of service attack that can lead to device crashes for affected Cisco Adaptive Security Appliances.

Q: Are there any workarounds for CVE-2010-4676?

There are no specific workarounds for CVE-2010-4676; the recommended solution is to upgrade the software.

Published Jan 7, 2011

Updated

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenticated users to cause a denial of service (device crash) via a high volume of IPsec traffic, aka Bug ID CSCsx52748.

Affected Software

58 affected components

Cisco Adaptive Security Appliance Software<=8.2\(2\)

Cisco Adaptive Security Appliance Software=7.0

Cisco Adaptive Security Appliance Software=7.0\(0\)

Cisco Adaptive Security Appliance Software=7.0\(2\)

Cisco Adaptive Security Appliance Software=7.0\(4\)

Cisco Adaptive Security Appliance Software=7.0\(5\)

Cisco Adaptive Security Appliance Software=7.0\(5.2\)

Cisco Adaptive Security Appliance Software=7.0\(6.7\)

Cisco Adaptive Security Appliance Software=7.0.1

Cisco Adaptive Security Appliance Software=7.0.1.4

Cisco Adaptive Security Appliance Software=7.0.2

Cisco Adaptive Security Appliance Software=7.0.4

Cisco Adaptive Security Appliance Software=7.0.4.3

Cisco Adaptive Security Appliance Software=7.0.5

Cisco Adaptive Security Appliance Software=7.0.6

Cisco Adaptive Security Appliance Software=7.0.7

Cisco Adaptive Security Appliance Software=7.0.8

Cisco Adaptive Security Appliance Software=7.0.8-interim

Cisco Adaptive Security Appliance Software=7.1

Cisco Adaptive Security Appliance Software=7.1\(2\)

Cisco Adaptive Security Appliance Software=7.1\(2.5\)

Cisco Adaptive Security Appliance Software=7.1\(2.27\)

Cisco Adaptive Security Appliance Software=7.1\(2.48\)

Cisco Adaptive Security Appliance Software=7.1\(2.49\)

Cisco Adaptive Security Appliance Software=7.1\(5\)

Cisco Adaptive Security Appliance Software=7.1.1

Cisco Adaptive Security Appliance Software=7.1.2

Cisco Adaptive Security Appliance Software=7.2

Cisco Adaptive Security Appliance Software=7.2\(1\)

Cisco Adaptive Security Appliance Software=7.2\(1.22\)

Cisco Adaptive Security Appliance Software=7.2\(2\)

Cisco Adaptive Security Appliance Software=7.2\(2.5\)

Cisco Adaptive Security Appliance Software=7.2\(2.7\)

Cisco Adaptive Security Appliance Software=7.2\(2.8\)

Cisco Adaptive Security Appliance Software=7.2\(2.10\)

Cisco Adaptive Security Appliance Software=7.2\(2.14\)

Cisco Adaptive Security Appliance Software=7.2\(2.15\)

Cisco Adaptive Security Appliance Software=7.2\(2.16\)

Cisco Adaptive Security Appliance Software=7.2\(2.17\)

Cisco Adaptive Security Appliance Software=7.2\(2.18\)

Cisco Adaptive Security Appliance Software=7.2\(2.19\)

Cisco Adaptive Security Appliance Software=7.2\(2.48\)

Cisco Adaptive Security Appliance Software=7.2.1

Cisco Adaptive Security Appliance Software=7.2.2

Cisco Adaptive Security Appliance Software=7.2.3

Cisco Adaptive Security Appliance Software=7.2.4

Cisco Adaptive Security Appliance Software=7.2.5

Cisco Adaptive Security Appliance Software=8.0

Cisco Adaptive Security Appliance Software=8.0.2

Cisco Adaptive Security Appliance Software=8.0.3

Cisco Adaptive Security Appliance Software=8.0.4

Cisco Adaptive Security Appliance Software=8.0.5

Cisco Adaptive Security Appliance Software=8.2\(1\)

Cisco Adaptive Security Appliance Software=8.2.1

Cisco Adaptive Security Appliance Software=8.2.2

Cisco Adaptive Security Appliance Software=8.2.2-interim

cisco 5500 Series Adaptive Security Appliance

cisco ASA 5500

Event History

Jan 7, 2011

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Data Sourced

12:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-4676?

CVE-2010-4676 has a high severity rating due to its potential to cause a denial of service through excessive IPsec traffic.

How do I fix CVE-2010-4676?

To fix CVE-2010-4676, upgrade to a Cisco Adaptive Security Appliance software version that is 8.2(3) or later.

What devices are affected by CVE-2010-4676?

CVE-2010-4676 affects Cisco Adaptive Security Appliance 5500 series devices running versions prior to 8.2(3) and specific earlier versions of the software.

What type of attack does CVE-2010-4676 facilitate?

CVE-2010-4676 facilitates a denial of service attack that can lead to device crashes for affected Cisco Adaptive Security Appliances.

Are there any workarounds for CVE-2010-4676?