What is the severity of CVE-2014-2129?

CVE-2014-2129 has been classified as a medium severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2014-2129?

To mitigate CVE-2014-2129, upgrade your Cisco Adaptive Security Appliance software to the versions specified by Cisco in the advisory.

What systems are affected by CVE-2014-2129?

CVE-2014-2129 affects Cisco Adaptive Security Appliance software versions 8.2, 8.4, 9.0, and 9.1 prior to their respective patch releases.

What type of attack does CVE-2014-2129 enable?

CVE-2014-2129 enables remote attackers to execute denial of service attacks through crafted SIP packets.

When was CVE-2014-2129 disclosed?

CVE-2014-2129 was disclosed on April 9, 2014, as part of a security advisory from Cisco.

Vulnerability/
CVE-2014-2129

high

7.1

CWE

10/4/2014

6/8/2024

CVE-2014-2129: Input Validation

First published: Thu Apr 10 2014(Updated: )

The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted SIP packets, aka Bug ID CSCuh44052.

Credit: ykramarz@cisco.com ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Adaptive Security Appliance Software	=8.2
Cisco Adaptive Security Appliance Software	=8.4
Cisco Adaptive Security Appliance Software	=9.0
Cisco Adaptive Security Appliance Software	=9.1

Never miss a vulnerability like this again

Reference Links

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-asa

Frequently Asked Questions

What is the severity of CVE-2014-2129?
CVE-2014-2129 has been classified as a medium severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2014-2129?
To mitigate CVE-2014-2129, upgrade your Cisco Adaptive Security Appliance software to the versions specified by Cisco in the advisory.
What systems are affected by CVE-2014-2129?
CVE-2014-2129 affects Cisco Adaptive Security Appliance software versions 8.2, 8.4, 9.0, and 9.1 prior to their respective patch releases.
What type of attack does CVE-2014-2129 enable?
CVE-2014-2129 enables remote attackers to execute denial of service attacks through crafted SIP packets.
When was CVE-2014-2129 disclosed?
CVE-2014-2129 was disclosed on April 9, 2014, as part of a security advisory from Cisco.

agent/author
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/severity
agent/last-modified-date
agent/references
agent/first-publish-date
agent/event
agent/description
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-api
vendor/cisco
canonical/cisco adaptive security appliance software
version/cisco adaptive security appliance software/8.2
version/cisco adaptive security appliance software/8.4
version/cisco adaptive security appliance software/9.0
version/cisco adaptive security appliance software/9.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.