CVE-2013-5568: Input Validation
Published Nov 13, 2013
·Updated
The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service (device reload) via crafted update data, aka Bug ID CSCui33308.
Affected Software
114 affected components
Cisco Adaptive Security Appliance Software<=9.0.3\(6\)
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(0\)
Cisco Adaptive Security Appliance Software=7.0\(1\)
Cisco Adaptive Security Appliance Software=7.0\(2\)
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0\(5\)
Cisco Adaptive Security Appliance Software=7.0\(5.2\)
Cisco Adaptive Security Appliance Software=7.0\(6\)
Cisco Adaptive Security Appliance Software=7.0\(6.7\)
Cisco Adaptive Security Appliance Software=7.0\(7\)
Cisco Adaptive Security Appliance Software=7.0\(8\)
Cisco Adaptive Security Appliance Software=7.0.1
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.2
Cisco Adaptive Security Appliance Software=7.0.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Adaptive Security Appliance Software=7.0.5
Cisco Adaptive Security Appliance Software=7.0.6
Cisco Adaptive Security Appliance Software=7.0.7
Cisco Adaptive Security Appliance Software=7.0.8
Cisco Adaptive Security Appliance Software=7.0.8-interim
Cisco Adaptive Security Appliance Software=7.1
Cisco Adaptive Security Appliance Software=7.1\(2\)
Cisco Adaptive Security Appliance Software=7.1\(2.5\)
Cisco Adaptive Security Appliance Software=7.1\(2.27\)
Cisco Adaptive Security Appliance Software=7.1\(2.48\)
Cisco Adaptive Security Appliance Software=7.1\(2.49\)
Cisco Adaptive Security Appliance Software=7.1\(5\)
Cisco Adaptive Security Appliance Software=7.1.1
Cisco Adaptive Security Appliance Software=7.1.2
Cisco Adaptive Security Appliance Software=7.2
Cisco Adaptive Security Appliance Software=7.2\(1\)
Cisco Adaptive Security Appliance Software=7.2\(1.22\)
Cisco Adaptive Security Appliance Software=7.2\(2\)
Cisco Adaptive Security Appliance Software=7.2\(2.5\)
Cisco Adaptive Security Appliance Software=7.2\(2.7\)
Cisco Adaptive Security Appliance Software=7.2\(2.8\)
Cisco Adaptive Security Appliance Software=7.2\(2.10\)
Cisco Adaptive Security Appliance Software=7.2\(2.14\)
Cisco Adaptive Security Appliance Software=7.2\(2.15\)
Cisco Adaptive Security Appliance Software=7.2\(2.16\)
Cisco Adaptive Security Appliance Software=7.2\(2.17\)
Cisco Adaptive Security Appliance Software=7.2\(2.18\)
Cisco Adaptive Security Appliance Software=7.2\(2.19\)
Cisco Adaptive Security Appliance Software=7.2\(2.48\)
Cisco Adaptive Security Appliance Software=7.2\(3\)
Cisco Adaptive Security Appliance Software=7.2\(4\)
Cisco Adaptive Security Appliance Software=7.2\(5\)
Cisco Adaptive Security Appliance Software=7.2.1
Cisco Adaptive Security Appliance Software=7.2.2
Cisco Adaptive Security Appliance Software=7.2.3
Cisco Adaptive Security Appliance Software=7.2.4
Cisco Adaptive Security Appliance Software=7.2.5
Cisco Adaptive Security Appliance Software=8.0
Cisco Adaptive Security Appliance Software=8.0\(2\)
Cisco Adaptive Security Appliance Software=8.0\(3\)
Cisco Adaptive Security Appliance Software=8.0\(4\)
Cisco Adaptive Security Appliance Software=8.0\(5\)
Cisco Adaptive Security Appliance Software=8.0\(5.28\)
Cisco Adaptive Security Appliance Software=8.0\(5.31\)
Cisco Adaptive Security Appliance Software=8.0.2
Cisco Adaptive Security Appliance Software=8.0.3
Cisco Adaptive Security Appliance Software=8.0.4
Cisco Adaptive Security Appliance Software=8.0.5
Cisco Adaptive Security Appliance Software=8.1
Cisco Adaptive Security Appliance Software=8.2
Cisco Adaptive Security Appliance Software=8.2\(1\)
Cisco Adaptive Security Appliance Software=8.2\(2\)
Cisco Adaptive Security Appliance Software=8.2\(3\)
Cisco Adaptive Security Appliance Software=8.2\(3.9\)
Cisco Adaptive Security Appliance Software=8.2\(4\)
Cisco Adaptive Security Appliance Software=8.2\(4.1\)
Cisco Adaptive Security Appliance Software=8.2\(4.4\)
Cisco Adaptive Security Appliance Software=8.2\(5\)
Cisco Adaptive Security Appliance Software=8.2\(5.35\)
Cisco Adaptive Security Appliance Software=8.2\(5.38\)
Cisco Adaptive Security Appliance Software=8.2.1
Cisco Adaptive Security Appliance Software=8.2.2
Cisco Adaptive Security Appliance Software=8.2.2-interim
Cisco Adaptive Security Appliance Software=8.2.3
Cisco Adaptive Security Appliance Software=8.3\(1\)
Cisco Adaptive Security Appliance Software=8.3\(2\)
Cisco Adaptive Security Appliance Software=8.3\(2.34\)
Cisco Adaptive Security Appliance Software=8.3\(2.37\)
Cisco Adaptive Security Appliance Software=8.3.1
Cisco Adaptive Security Appliance Software=8.3.1-interim
Cisco Adaptive Security Appliance Software=8.3.2
Cisco Adaptive Security Appliance Software=8.4
Cisco Adaptive Security Appliance Software=8.4\(1\)
Cisco Adaptive Security Appliance Software=8.4\(1.11\)
Cisco Adaptive Security Appliance Software=8.4\(2\)
Cisco Adaptive Security Appliance Software=8.4\(2.11\)
Cisco Adaptive Security Appliance Software=8.4\(3\)
Cisco Adaptive Security Appliance Software=8.4\(4.11\)
Cisco Adaptive Security Appliance Software=8.4\(5\)
Cisco Adaptive Security Appliance Software=8.4\(6\)
Cisco Adaptive Security Appliance Software=8.5
Cisco Adaptive Security Appliance Software=8.5\(1\)
Cisco Adaptive Security Appliance Software=8.5\(1.4\)
Cisco Adaptive Security Appliance Software=8.5\(1.17\)
Cisco Adaptive Security Appliance Software=8.6
Cisco Adaptive Security Appliance Software=8.6\(1\)
Cisco Adaptive Security Appliance Software=8.6\(1.3\)
Cisco Adaptive Security Appliance Software=8.6\(1.10\)
Cisco Adaptive Security Appliance Software=8.7
Cisco Adaptive Security Appliance Software=8.7\(1.1\)
Cisco Adaptive Security Appliance Software=8.7\(1.3\)
Cisco Adaptive Security Appliance Software=8.7.1
Cisco Adaptive Security Appliance Software=8.7.1.1
Cisco Adaptive Security Appliance Software=9.0
Cisco Adaptive Security Appliance Software=9.0\(1\)
Cisco Adaptive Security Appliance Software=9.0\(2\)
Cisco Adaptive Security Appliance Software=9.0\(3\)
Event History
Nov 13, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5568?
The severity of CVE-2013-5568 is classified as medium, due to the potential for remote denial of service.
2
How do I fix CVE-2013-5568?
To fix CVE-2013-5568, you should upgrade to Cisco Adaptive Security Appliance Software version 9.0.3.7 or later.
3
What systems are affected by CVE-2013-5568?
CVE-2013-5568 affects Cisco Adaptive Security Appliance Software versions up to and including 9.0.3.6 and some 7.x versions.
4
What type of attack does CVE-2013-5568 allow?
CVE-2013-5568 allows remote attackers to launch a denial of service attack that can cause the device to reload.
5
Can CVE-2013-5568 be exploited remotely?
Yes, CVE-2013-5568 can be exploited remotely through crafted update data sent to the affected device.