CVE-2013-5560: Input Validation
Published Nov 13, 2013
·Updated
The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCue34342.
Affected Software
118 affected components
Cisco Adaptive Security Appliance Software<=9.1\(3\)
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(0\)
Cisco Adaptive Security Appliance Software=7.0\(1\)
Cisco Adaptive Security Appliance Software=7.0\(2\)
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0\(5\)
Cisco Adaptive Security Appliance Software=7.0\(5.2\)
Cisco Adaptive Security Appliance Software=7.0\(6\)
Cisco Adaptive Security Appliance Software=7.0\(6.7\)
Cisco Adaptive Security Appliance Software=7.0\(7\)
Cisco Adaptive Security Appliance Software=7.0\(8\)
Cisco Adaptive Security Appliance Software=7.0.1
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.2
Cisco Adaptive Security Appliance Software=7.0.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Adaptive Security Appliance Software=7.0.5
Cisco Adaptive Security Appliance Software=7.0.6
Cisco Adaptive Security Appliance Software=7.0.7
Cisco Adaptive Security Appliance Software=7.0.8
Cisco Adaptive Security Appliance Software=7.0.8-interim
Cisco Adaptive Security Appliance Software=7.1
Cisco Adaptive Security Appliance Software=7.1\(2\)
Cisco Adaptive Security Appliance Software=7.1\(2.5\)
Cisco Adaptive Security Appliance Software=7.1\(2.27\)
Cisco Adaptive Security Appliance Software=7.1\(2.48\)
Cisco Adaptive Security Appliance Software=7.1\(2.49\)
Cisco Adaptive Security Appliance Software=7.1\(5\)
Cisco Adaptive Security Appliance Software=7.1.1
Cisco Adaptive Security Appliance Software=7.1.2
Cisco Adaptive Security Appliance Software=7.2
Cisco Adaptive Security Appliance Software=7.2\(1\)
Cisco Adaptive Security Appliance Software=7.2\(1.22\)
Cisco Adaptive Security Appliance Software=7.2\(2\)
Cisco Adaptive Security Appliance Software=7.2\(2.5\)
Cisco Adaptive Security Appliance Software=7.2\(2.7\)
Cisco Adaptive Security Appliance Software=7.2\(2.8\)
Cisco Adaptive Security Appliance Software=7.2\(2.10\)
Cisco Adaptive Security Appliance Software=7.2\(2.14\)
Cisco Adaptive Security Appliance Software=7.2\(2.15\)
Cisco Adaptive Security Appliance Software=7.2\(2.16\)
Cisco Adaptive Security Appliance Software=7.2\(2.17\)
Cisco Adaptive Security Appliance Software=7.2\(2.18\)
Cisco Adaptive Security Appliance Software=7.2\(2.19\)
Cisco Adaptive Security Appliance Software=7.2\(2.48\)
Cisco Adaptive Security Appliance Software=7.2\(3\)
Cisco Adaptive Security Appliance Software=7.2\(4\)
Cisco Adaptive Security Appliance Software=7.2\(5\)
Cisco Adaptive Security Appliance Software=7.2.1
Cisco Adaptive Security Appliance Software=7.2.2
Cisco Adaptive Security Appliance Software=7.2.3
Cisco Adaptive Security Appliance Software=7.2.4
Cisco Adaptive Security Appliance Software=7.2.5
Cisco Adaptive Security Appliance Software=8.0
Cisco Adaptive Security Appliance Software=8.0\(2\)
Cisco Adaptive Security Appliance Software=8.0\(3\)
Cisco Adaptive Security Appliance Software=8.0\(4\)
Cisco Adaptive Security Appliance Software=8.0\(5\)
Cisco Adaptive Security Appliance Software=8.0\(5.28\)
Cisco Adaptive Security Appliance Software=8.0\(5.31\)
Cisco Adaptive Security Appliance Software=8.0.2
Cisco Adaptive Security Appliance Software=8.0.3
Cisco Adaptive Security Appliance Software=8.0.4
Cisco Adaptive Security Appliance Software=8.0.5
Cisco Adaptive Security Appliance Software=8.1
Cisco Adaptive Security Appliance Software=8.2
Cisco Adaptive Security Appliance Software=8.2\(1\)
Cisco Adaptive Security Appliance Software=8.2\(2\)
Cisco Adaptive Security Appliance Software=8.2\(3\)
Cisco Adaptive Security Appliance Software=8.2\(3.9\)
Cisco Adaptive Security Appliance Software=8.2\(4\)
Cisco Adaptive Security Appliance Software=8.2\(4.1\)
Cisco Adaptive Security Appliance Software=8.2\(4.4\)
Cisco Adaptive Security Appliance Software=8.2\(5\)
Cisco Adaptive Security Appliance Software=8.2\(5.35\)
Cisco Adaptive Security Appliance Software=8.2\(5.38\)
Cisco Adaptive Security Appliance Software=8.2.1
Cisco Adaptive Security Appliance Software=8.2.2
Cisco Adaptive Security Appliance Software=8.2.2-interim
Cisco Adaptive Security Appliance Software=8.2.3
Cisco Adaptive Security Appliance Software=8.3\(1\)
Cisco Adaptive Security Appliance Software=8.3\(2\)
Cisco Adaptive Security Appliance Software=8.3\(2.34\)
Cisco Adaptive Security Appliance Software=8.3\(2.37\)
Cisco Adaptive Security Appliance Software=8.3.1
Cisco Adaptive Security Appliance Software=8.3.1-interim
Cisco Adaptive Security Appliance Software=8.3.2
Cisco Adaptive Security Appliance Software=8.4
Cisco Adaptive Security Appliance Software=8.4\(1\)
Cisco Adaptive Security Appliance Software=8.4\(1.11\)
Cisco Adaptive Security Appliance Software=8.4\(2\)
Cisco Adaptive Security Appliance Software=8.4\(2.11\)
Cisco Adaptive Security Appliance Software=8.4\(3\)
Cisco Adaptive Security Appliance Software=8.4\(4.11\)
Cisco Adaptive Security Appliance Software=8.4\(5\)
Cisco Adaptive Security Appliance Software=8.4\(6\)
Cisco Adaptive Security Appliance Software=8.5
Cisco Adaptive Security Appliance Software=8.5\(1\)
Cisco Adaptive Security Appliance Software=8.5\(1.4\)
Cisco Adaptive Security Appliance Software=8.5\(1.17\)
Cisco Adaptive Security Appliance Software=8.6
Cisco Adaptive Security Appliance Software=8.6\(1\)
Cisco Adaptive Security Appliance Software=8.6\(1.3\)
Cisco Adaptive Security Appliance Software=8.6\(1.10\)
Cisco Adaptive Security Appliance Software=8.7
Cisco Adaptive Security Appliance Software=8.7\(1.1\)
Cisco Adaptive Security Appliance Software=8.7\(1.3\)
Cisco Adaptive Security Appliance Software=8.7.1
Cisco Adaptive Security Appliance Software=8.7.1.1
Cisco Adaptive Security Appliance Software=9.0
Cisco Adaptive Security Appliance Software=9.0\(1\)
Cisco Adaptive Security Appliance Software=9.0\(2\)
Cisco Adaptive Security Appliance Software=9.0\(3\)
Cisco Adaptive Security Appliance Software=9.1
Cisco Adaptive Security Appliance Software=9.1\(1\)
Cisco Adaptive Security Appliance Software=9.1\(1.7\)
Cisco Adaptive Security Appliance Software=9.1\(2\)
Event History
Nov 13, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5560?
CVE-2013-5560 has been classified with a high severity due to its potential for causing denial of service.
2
How does CVE-2013-5560 affect Cisco Adaptive Security Appliance Software?
CVE-2013-5560 affects Cisco ASA Software versions 9.1.3 and earlier when NAT64 or NAT66 is enabled, leading to possible device reloads.
3
What are the affected devices for CVE-2013-5560?
CVE-2013-5560 impacts various versions of Cisco Adaptive Security Appliance Software, including 7.0 through 9.1.3.
4
How do I fix CVE-2013-5560?
To remediate CVE-2013-5560, upgrade your Cisco Adaptive Security Appliance Software to a version later than 9.1.3.
5
What type of attack does CVE-2013-5560 allow?
CVE-2013-5560 allows remote attackers to cause a denial of service by sending crafted packets to the affected device.