First published: Wed Nov 13 2013(Updated: )
The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCue34342.
Credit: ykramarz@cisco.com ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Adaptive Security Appliance | <=9.1\(3\) | |
Cisco Adaptive Security Appliance | =7.0 | |
Cisco Adaptive Security Appliance | =7.0\(0\) | |
Cisco Adaptive Security Appliance | =7.0\(1\) | |
Cisco Adaptive Security Appliance | =7.0\(2\) | |
Cisco Adaptive Security Appliance | =7.0\(4\) | |
Cisco Adaptive Security Appliance | =7.0\(5\) | |
Cisco Adaptive Security Appliance | =7.0\(5.2\) | |
Cisco Adaptive Security Appliance Software | =7.0\(6\) | |
Cisco Adaptive Security Appliance Software | =7.0\(6.7\) | |
Cisco Adaptive Security Appliance Software | =7.0\(7\) | |
Cisco Adaptive Security Appliance Software | =7.0\(8\) | |
Cisco Adaptive Security Appliance Software | =7.0.1 | |
Cisco Adaptive Security Appliance Software | =7.0.1.4 | |
Cisco Adaptive Security Appliance Software | =7.0.2 | |
Cisco Adaptive Security Appliance Software | =7.0.4 | |
Cisco Adaptive Security Appliance Software | =7.0.4.3 | |
Cisco Adaptive Security Appliance Software | =7.0.5 | |
Cisco Adaptive Security Appliance Software | =7.0.6 | |
Cisco Adaptive Security Appliance Software | =7.0.7 | |
Cisco Adaptive Security Appliance Software | =7.0.8 | |
Cisco Adaptive Security Appliance Software | =7.0.8-interim | |
Cisco Adaptive Security Appliance Software | =7.1 | |
Cisco Adaptive Security Appliance Software | =7.1\(2\) | |
Cisco Adaptive Security Appliance Software | =7.1\(2.5\) | |
Cisco Adaptive Security Appliance Software | =7.1\(2.27\) | |
Cisco Adaptive Security Appliance Software | =7.1\(2.48\) | |
Cisco Adaptive Security Appliance Software | =7.1\(2.49\) | |
Cisco Adaptive Security Appliance Software | =7.1\(5\) | |
Cisco Adaptive Security Appliance Software | =7.1.1 | |
Cisco Adaptive Security Appliance Software | =7.1.2 | |
Cisco Adaptive Security Appliance Software | =7.2 | |
Cisco Adaptive Security Appliance Software | =7.2\(1\) | |
Cisco Adaptive Security Appliance Software | =7.2\(1.22\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.5\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.7\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.8\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.10\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.14\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.15\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.16\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.17\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.18\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.19\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.48\) | |
Cisco Adaptive Security Appliance Software | =7.2\(3\) | |
Cisco Adaptive Security Appliance Software | =7.2\(4\) | |
Cisco Adaptive Security Appliance Software | =7.2\(5\) | |
Cisco Adaptive Security Appliance Software | =7.2.1 | |
Cisco Adaptive Security Appliance Software | =7.2.2 | |
Cisco Adaptive Security Appliance Software | =7.2.3 | |
Cisco Adaptive Security Appliance Software | =7.2.4 | |
Cisco Adaptive Security Appliance Software | =7.2.5 | |
Cisco Adaptive Security Appliance Software | =8.0 | |
Cisco Adaptive Security Appliance Software | =8.0\(2\) | |
Cisco Adaptive Security Appliance Software | =8.0\(3\) | |
Cisco Adaptive Security Appliance Software | =8.0\(4\) | |
Cisco Adaptive Security Appliance Software | =8.0\(5\) | |
Cisco Adaptive Security Appliance Software | =8.0\(5.28\) | |
Cisco Adaptive Security Appliance Software | =8.0\(5.31\) | |
Cisco Adaptive Security Appliance Software | =8.0.2 | |
Cisco Adaptive Security Appliance Software | =8.0.3 | |
Cisco Adaptive Security Appliance Software | =8.0.4 | |
Cisco Adaptive Security Appliance Software | =8.0.5 | |
Cisco Adaptive Security Appliance Software | =8.1 | |
Cisco Adaptive Security Appliance Software | =8.2 | |
Cisco Adaptive Security Appliance Software | =8.2\(1\) | |
Cisco Adaptive Security Appliance Software | =8.2\(2\) | |
Cisco Adaptive Security Appliance Software | =8.2\(3\) | |
Cisco Adaptive Security Appliance Software | =8.2\(3.9\) | |
Cisco Adaptive Security Appliance Software | =8.2\(4\) | |
Cisco Adaptive Security Appliance Software | =8.2\(4.1\) | |
Cisco Adaptive Security Appliance Software | =8.2\(4.4\) | |
Cisco Adaptive Security Appliance Software | =8.2\(5\) | |
Cisco Adaptive Security Appliance Software | =8.2\(5.35\) | |
Cisco Adaptive Security Appliance Software | =8.2\(5.38\) | |
Cisco Adaptive Security Appliance Software | =8.2.1 | |
Cisco Adaptive Security Appliance Software | =8.2.2 | |
Cisco Adaptive Security Appliance Software | =8.2.2-interim | |
Cisco Adaptive Security Appliance Software | =8.2.3 | |
Cisco Adaptive Security Appliance Software | =8.3\(1\) | |
Cisco Adaptive Security Appliance Software | =8.3\(2\) | |
Cisco Adaptive Security Appliance Software | =8.3\(2.34\) | |
Cisco Adaptive Security Appliance Software | =8.3\(2.37\) | |
Cisco Adaptive Security Appliance Software | =8.3.1 | |
Cisco Adaptive Security Appliance Software | =8.3.1-interim | |
Cisco Adaptive Security Appliance Software | =8.3.2 | |
Cisco Adaptive Security Appliance Software | =8.4 | |
Cisco Adaptive Security Appliance Software | =8.4\(1\) | |
Cisco Adaptive Security Appliance Software | =8.4\(1.11\) | |
Cisco Adaptive Security Appliance Software | =8.4\(2\) | |
Cisco Adaptive Security Appliance Software | =8.4\(2.11\) | |
Cisco Adaptive Security Appliance Software | =8.4\(3\) | |
Cisco Adaptive Security Appliance Software | =8.4\(4.11\) | |
Cisco Adaptive Security Appliance Software | =8.4\(5\) | |
Cisco Adaptive Security Appliance Software | =8.4\(6\) | |
Cisco Adaptive Security Appliance Software | =8.5 | |
Cisco Adaptive Security Appliance Software | =8.5\(1\) | |
Cisco Adaptive Security Appliance Software | =8.5\(1.4\) | |
Cisco Adaptive Security Appliance Software | =8.5\(1.17\) | |
Cisco Adaptive Security Appliance Software | =8.6 | |
Cisco Adaptive Security Appliance Software | =8.6\(1\) | |
Cisco Adaptive Security Appliance Software | =8.6\(1.3\) | |
Cisco Adaptive Security Appliance Software | =8.6\(1.10\) | |
Cisco Adaptive Security Appliance Software | =8.7 | |
Cisco Adaptive Security Appliance Software | =8.7\(1.1\) | |
Cisco Adaptive Security Appliance Software | =8.7\(1.3\) | |
Cisco Adaptive Security Appliance Software | =8.7.1 | |
Cisco Adaptive Security Appliance Software | =8.7.1.1 | |
Cisco Adaptive Security Appliance Software | =9.0 | |
Cisco Adaptive Security Appliance Software | =9.0\(1\) | |
Cisco Adaptive Security Appliance Software | =9.0\(2\) | |
Cisco Adaptive Security Appliance Software | =9.0\(3\) | |
Cisco Adaptive Security Appliance Software | =9.1 | |
Cisco Adaptive Security Appliance Software | =9.1\(1\) | |
Cisco Adaptive Security Appliance Software | =9.1\(1.7\) | |
Cisco Adaptive Security Appliance Software | =9.1\(2\) | |
Cisco Adaptive Security Appliance Software | <=9.1\(3\) | |
Cisco Adaptive Security Appliance Software | =7.0 | |
Cisco Adaptive Security Appliance Software | =7.0\(0\) | |
Cisco Adaptive Security Appliance Software | =7.0\(1\) | |
Cisco Adaptive Security Appliance Software | =7.0\(2\) | |
Cisco Adaptive Security Appliance Software | =7.0\(4\) | |
Cisco Adaptive Security Appliance Software | =7.0\(5\) | |
Cisco Adaptive Security Appliance Software | =7.0\(5.2\) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5560 has been classified with a high severity due to its potential for causing denial of service.
CVE-2013-5560 affects Cisco ASA Software versions 9.1.3 and earlier when NAT64 or NAT66 is enabled, leading to possible device reloads.
CVE-2013-5560 impacts various versions of Cisco Adaptive Security Appliance Software, including 7.0 through 9.1.3.
To remediate CVE-2013-5560, upgrade your Cisco Adaptive Security Appliance Software to a version later than 9.1.3.
CVE-2013-5560 allows remote attackers to cause a denial of service by sending crafted packets to the affected device.