CVE-2015-6290: Buffer Overflow
Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption from stale TCP connections) via crafted responses, aka Bug ID CSCuw10426.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6290?
CVE-2015-6290 is classified as a denial of service vulnerability due to memory consumption caused by stale TCP connections.
How do I fix CVE-2015-6290?
To fix CVE-2015-6290, you should upgrade to a patched version of the Cisco Web Security Appliance that is not vulnerable.
Which versions of Cisco Web Security Virtual Appliance are affected by CVE-2015-6290?
CVE-2015-6290 affects Cisco Web Security Virtual Appliance versions 8.0.5, 8.0.6, 8.0.7, and 8.0_base.
What are the potential impacts of CVE-2015-6290?
The potential impacts of CVE-2015-6290 include service disruption due to denial of service caused by memory exhaustion.
Is there any workaround for CVE-2015-6290?
There are no known workarounds for CVE-2015-6290; upgrading to a non-vulnerable version is the recommended solution.