CVE-2016-6366: Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

Published Aug 18, 2016
·
Updated

A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.

Other sources

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Affected Software

356 affected components
Cisco Adaptive Security Appliance (ASA)
Cisco Firepower Threat Defense Software=6.0.0
Cisco Firepower Threat Defense Software=6.0.1
Cisco FirePOWER Services Software for ASA=5.4.0
Cisco FirePOWER Services Software for ASA=5.4.1
Cisco FirePOWER Services Software for ASA=5.4.1.1
Cisco FirePOWER Services Software for ASA=5.4.1.2
Cisco FirePOWER Services Software for ASA=5.4.1.3
Cisco FirePOWER Services Software for ASA=5.4.1.4
Cisco FirePOWER Services Software for ASA=5.4.1.5
Cisco FirePOWER Services Software for ASA=5.4.1.6
Cisco FirePOWER Services Software for ASA=5.4.1.7
Cisco PIX firewall=501_base
Cisco PIX firewall=506_base
Cisco PIX firewall=515_base
Cisco PIX firewall=515e_base
Cisco PIX firewall=520_base
Cisco PIX firewall=525_6.3
Cisco PIX firewall=525_base
Cisco PIX firewall=535_base
Cisco PIX firewall=base
Cisco Adaptive Security Appliance Software=7.0.1
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.2
Cisco Adaptive Security Appliance Software=7.0.3
Cisco Adaptive Security Appliance Software=7.0.4
Cisco Adaptive Security Appliance Software=7.0.4.2
Cisco Adaptive Security Appliance Software=7.0.5
Cisco Adaptive Security Appliance Software=7.0.5.12
Cisco Adaptive Security Appliance Software=7.0.6
Cisco Adaptive Security Appliance Software=7.0.6.4
Cisco Adaptive Security Appliance Software=7.0.6.8
Cisco Adaptive Security Appliance Software=7.0.6.18
Cisco Adaptive Security Appliance Software=7.0.6.22
Cisco Adaptive Security Appliance Software=7.0.6.26
Cisco Adaptive Security Appliance Software=7.0.6.29
Cisco Adaptive Security Appliance Software=7.0.6.32
Cisco Adaptive Security Appliance Software=7.0.7
Cisco Adaptive Security Appliance Software=7.0.7.1
Cisco Adaptive Security Appliance Software=7.0.7.4
Cisco Adaptive Security Appliance Software=7.0.7.9
Cisco Adaptive Security Appliance Software=7.0.7.12
Cisco Adaptive Security Appliance Software=7.0.8
Cisco Adaptive Security Appliance Software=7.0.8.2
Cisco Adaptive Security Appliance Software=7.0.8.8
Cisco Adaptive Security Appliance Software=7.0.8.12
Cisco Adaptive Security Appliance Software=7.0.8.13
Cisco Adaptive Security Appliance Software=7.1.2
Cisco Adaptive Security Appliance Software=7.1.2.16
Cisco Adaptive Security Appliance Software=7.1.2.20
Cisco Adaptive Security Appliance Software=7.1.2.24
Cisco Adaptive Security Appliance Software=7.1.2.28
Cisco Adaptive Security Appliance Software=7.1.2.38
Cisco Adaptive Security Appliance Software=7.1.2.42
Cisco Adaptive Security Appliance Software=7.1.2.46
Cisco Adaptive Security Appliance Software=7.1.2.49
Cisco Adaptive Security Appliance Software=7.1.2.53
Cisco Adaptive Security Appliance Software=7.1.2.61
Cisco Adaptive Security Appliance Software=7.1.2.64
Cisco Adaptive Security Appliance Software=7.1.2.72
Cisco Adaptive Security Appliance Software=7.1.2.81
Cisco Adaptive Security Appliance Software=7.2.1
Cisco Adaptive Security Appliance Software=7.2.1.9
Cisco Adaptive Security Appliance Software=7.2.1.13
Cisco Adaptive Security Appliance Software=7.2.1.19
Cisco Adaptive Security Appliance Software=7.2.1.24
Cisco Adaptive Security Appliance Software=7.2.2
Cisco Adaptive Security Appliance Software=7.2.2.6
Cisco Adaptive Security Appliance Software=7.2.2.10
Cisco Adaptive Security Appliance Software=7.2.2.14
Cisco Adaptive Security Appliance Software=7.2.2.18
Cisco Adaptive Security Appliance Software=7.2.2.19
Cisco Adaptive Security Appliance Software=7.2.2.22
Cisco Adaptive Security Appliance Software=7.2.2.34
Cisco Adaptive Security Appliance Software=7.2.3
Cisco Adaptive Security Appliance Software=7.2.3.1
Cisco Adaptive Security Appliance Software=7.2.3.12
Cisco Adaptive Security Appliance Software=7.2.3.16
Cisco Adaptive Security Appliance Software=7.2.4
Cisco Adaptive Security Appliance Software=7.2.4.6
Cisco Adaptive Security Appliance Software=7.2.4.9
Cisco Adaptive Security Appliance Software=7.2.4.18
Cisco Adaptive Security Appliance Software=7.2.4.25
Cisco Adaptive Security Appliance Software=7.2.4.27
Cisco Adaptive Security Appliance Software=7.2.4.30
Cisco Adaptive Security Appliance Software=7.2.4.33
Cisco Adaptive Security Appliance Software=7.2.5
Cisco Adaptive Security Appliance Software=7.2.5.2
Cisco Adaptive Security Appliance Software=7.2.5.4
Cisco Adaptive Security Appliance Software=7.2.5.7
Cisco Adaptive Security Appliance Software=7.2.5.8
Cisco Adaptive Security Appliance Software=7.2.5.10
Cisco Adaptive Security Appliance Software=7.2.5.12
Cisco Adaptive Security Appliance Software=7.2.5.16
Cisco Adaptive Security Appliance Software=8.0.1.2
Cisco Adaptive Security Appliance Software=8.0.2
Cisco Adaptive Security Appliance Software=8.0.2.11
Cisco Adaptive Security Appliance Software=8.0.2.15
Cisco Adaptive Security Appliance Software=8.0.3
Cisco Adaptive Security Appliance Software=8.0.3.6
Cisco Adaptive Security Appliance Software=8.0.3.12
Cisco Adaptive Security Appliance Software=8.0.3.19
Cisco Adaptive Security Appliance Software=8.0.4
Cisco Adaptive Security Appliance Software=8.0.4.3
Cisco Adaptive Security Appliance Software=8.0.4.9
Cisco Adaptive Security Appliance Software=8.0.4.16
Cisco Adaptive Security Appliance Software=8.0.4.23
Cisco Adaptive Security Appliance Software=8.0.4.25
Cisco Adaptive Security Appliance Software=8.0.4.28
Cisco Adaptive Security Appliance Software=8.0.4.31
Cisco Adaptive Security Appliance Software=8.0.4.32
Cisco Adaptive Security Appliance Software=8.0.4.33
Cisco Adaptive Security Appliance Software=8.0.5
Cisco Adaptive Security Appliance Software=8.0.5.20
Cisco Adaptive Security Appliance Software=8.0.5.23
Cisco Adaptive Security Appliance Software=8.0.5.25
Cisco Adaptive Security Appliance Software=8.0.5.27
Cisco Adaptive Security Appliance Software=8.0.5.28
Cisco Adaptive Security Appliance Software=8.0.5.31
Cisco Adaptive Security Appliance Software=8.1.0.104
Cisco Adaptive Security Appliance Software=8.1.1
Cisco Adaptive Security Appliance Software=8.1.1.6
Cisco Adaptive Security Appliance Software=8.1.2
Cisco Adaptive Security Appliance Software=8.1.2.13
Cisco Adaptive Security Appliance Software=8.1.2.15
Cisco Adaptive Security Appliance Software=8.1.2.16
Cisco Adaptive Security Appliance Software=8.1.2.19
Cisco Adaptive Security Appliance Software=8.1.2.23
Cisco Adaptive Security Appliance Software=8.1.2.24
Cisco Adaptive Security Appliance Software=8.1.2.49
Cisco Adaptive Security Appliance Software=8.1.2.50
Cisco Adaptive Security Appliance Software=8.1.2.55
Cisco Adaptive Security Appliance Software=8.1.2.56
Cisco Adaptive Security Appliance Software=8.2.0.45
Cisco Adaptive Security Appliance Software=8.2.1
Cisco Adaptive Security Appliance Software=8.2.1.11
Cisco Adaptive Security Appliance Software=8.2.2
Cisco Adaptive Security Appliance Software=8.2.2.9
Cisco Adaptive Security Appliance Software=8.2.2.10
Cisco Adaptive Security Appliance Software=8.2.2.12
Cisco Adaptive Security Appliance Software=8.2.2.16
Cisco Adaptive Security Appliance Software=8.2.2.17
Cisco Adaptive Security Appliance Software=8.2.3
Cisco Adaptive Security Appliance Software=8.2.4
Cisco Adaptive Security Appliance Software=8.2.4.1
Cisco Adaptive Security Appliance Software=8.2.4.4
Cisco Adaptive Security Appliance Software=8.2.5
Cisco Adaptive Security Appliance Software=8.2.5.13
Cisco Adaptive Security Appliance Software=8.2.5.22
Cisco Adaptive Security Appliance Software=8.2.5.26
Cisco Adaptive Security Appliance Software=8.2.5.33
Cisco Adaptive Security Appliance Software=8.2.5.40
Cisco Adaptive Security Appliance Software=8.2.5.41
Cisco Adaptive Security Appliance Software=8.2.5.46
Cisco Adaptive Security Appliance Software=8.2.5.48
Cisco Adaptive Security Appliance Software=8.2.5.50
Cisco Adaptive Security Appliance Software=8.2.5.52
Cisco Adaptive Security Appliance Software=8.2.5.55
Cisco Adaptive Security Appliance Software=8.2.5.57
Cisco Adaptive Security Appliance Software=8.3.1
Cisco Adaptive Security Appliance Software=8.3.1.1
Cisco Adaptive Security Appliance Software=8.3.1.4
Cisco Adaptive Security Appliance Software=8.3.1.6
Cisco Adaptive Security Appliance Software=8.3.2
Cisco Adaptive Security Appliance Software=8.3.2.4
Cisco Adaptive Security Appliance Software=8.3.2.13
Cisco Adaptive Security Appliance Software=8.3.2.23
Cisco Adaptive Security Appliance Software=8.3.2.25
Cisco Adaptive Security Appliance Software=8.3.2.31
Cisco Adaptive Security Appliance Software=8.3.2.33
Cisco Adaptive Security Appliance Software=8.3.2.34
Cisco Adaptive Security Appliance Software=8.3.2.37
Cisco Adaptive Security Appliance Software=8.3.2.39
Cisco Adaptive Security Appliance Software=8.3.2.40
Cisco Adaptive Security Appliance Software=8.3.2.41
Cisco Adaptive Security Appliance Software=8.3.2.44
Cisco Adaptive Security Appliance Software=8.4.0
Cisco Adaptive Security Appliance Software=8.4.1
Cisco Adaptive Security Appliance Software=8.4.1.3
Cisco Adaptive Security Appliance Software=8.4.1.11
Cisco Adaptive Security Appliance Software=8.4.2
Cisco Adaptive Security Appliance Software=8.4.2.1
Cisco Adaptive Security Appliance Software=8.4.2.8
Cisco Adaptive Security Appliance Software=8.4.3
Cisco Adaptive Security Appliance Software=8.4.3.8
Cisco Adaptive Security Appliance Software=8.4.3.9
Cisco Adaptive Security Appliance Software=8.4.4
Cisco Adaptive Security Appliance Software=8.4.4.1
Cisco Adaptive Security Appliance Software=8.4.4.3
Cisco Adaptive Security Appliance Software=8.4.4.5
Cisco Adaptive Security Appliance Software=8.4.4.9
Cisco Adaptive Security Appliance Software=8.4.5
Cisco Adaptive Security Appliance Software=8.4.5.6
Cisco Adaptive Security Appliance Software=8.4.6
Cisco Adaptive Security Appliance Software=8.4.7
Cisco Adaptive Security Appliance Software=8.4.7.3
Cisco Adaptive Security Appliance Software=8.4.7.15
Cisco Adaptive Security Appliance Software=8.4.7.22
Cisco Adaptive Security Appliance Software=8.4.7.23
Cisco Adaptive Security Appliance Software=8.4.7.26
Cisco Adaptive Security Appliance Software=8.4.7.28
Cisco Adaptive Security Appliance Software=8.4.7.29
Cisco Adaptive Security Appliance Software=8.5.1
Cisco Adaptive Security Appliance Software=8.5.1.1
Cisco Adaptive Security Appliance Software=8.5.1.6
Cisco Adaptive Security Appliance Software=8.5.1.7
Cisco Adaptive Security Appliance Software=8.5.1.14
Cisco Adaptive Security Appliance Software=8.5.1.17
Cisco Adaptive Security Appliance Software=8.5.1.18
Cisco Adaptive Security Appliance Software=8.5.1.19
Cisco Adaptive Security Appliance Software=8.5.1.21
Cisco Adaptive Security Appliance Software=8.5.1.24
Cisco Adaptive Security Appliance Software=8.6.1
Cisco Adaptive Security Appliance Software=8.6.1.1
Cisco Adaptive Security Appliance Software=8.6.1.2
Cisco Adaptive Security Appliance Software=8.6.1.5
Cisco Adaptive Security Appliance Software=8.6.1.10
Cisco Adaptive Security Appliance Software=8.6.1.12
Cisco Adaptive Security Appliance Software=8.6.1.13
Cisco Adaptive Security Appliance Software=8.6.1.14
Cisco Adaptive Security Appliance Software=8.6.1.17
Cisco Adaptive Security Appliance Software=8.7.1
Cisco Adaptive Security Appliance Software=8.7.1.1
Cisco Adaptive Security Appliance Software=8.7.1.3
Cisco Adaptive Security Appliance Software=8.7.1.4
Cisco Adaptive Security Appliance Software=8.7.1.7
Cisco Adaptive Security Appliance Software=8.7.1.8
Cisco Adaptive Security Appliance Software=8.7.1.11
Cisco Adaptive Security Appliance Software=8.7.1.13
Cisco Adaptive Security Appliance Software=8.7.1.16
Cisco Adaptive Security Appliance Software=8.7.1.17
Cisco Adaptive Security Appliance Software=9.0.1
Cisco Adaptive Security Appliance Software=9.0.2
Cisco Adaptive Security Appliance Software=9.0.2.10
Cisco Adaptive Security Appliance Software=9.0.3
Cisco Adaptive Security Appliance Software=9.0.3.6
Cisco Adaptive Security Appliance Software=9.0.3.8
Cisco Adaptive Security Appliance Software=9.0.4
Cisco Adaptive Security Appliance Software=9.0.4.1
Cisco Adaptive Security Appliance Software=9.0.4.5
Cisco Adaptive Security Appliance Software=9.0.4.7
Cisco Adaptive Security Appliance Software=9.0.4.17
Cisco Adaptive Security Appliance Software=9.0.4.20
Cisco Adaptive Security Appliance Software=9.0.4.24
Cisco Adaptive Security Appliance Software=9.0.4.26
Cisco Adaptive Security Appliance Software=9.0.4.29
Cisco Adaptive Security Appliance Software=9.0.4.33
Cisco Adaptive Security Appliance Software=9.0.4.35
Cisco Adaptive Security Appliance Software=9.0.4.37
Cisco Adaptive Security Appliance Software=9.1.1
Cisco Adaptive Security Appliance Software=9.1.1.4
Cisco Adaptive Security Appliance Software=9.1.2
Cisco Adaptive Security Appliance Software=9.1.2.8
Cisco Adaptive Security Appliance Software=9.1.3
Cisco Adaptive Security Appliance Software=9.1.3.2
Cisco Adaptive Security Appliance Software=9.1.4
Cisco Adaptive Security Appliance Software=9.1.4.5
Cisco Adaptive Security Appliance Software=9.1.5
Cisco Adaptive Security Appliance Software=9.1.5.10
Cisco Adaptive Security Appliance Software=9.1.5.12
Cisco Adaptive Security Appliance Software=9.1.5.15
Cisco Adaptive Security Appliance Software=9.1.5.21
Cisco Adaptive Security Appliance Software=9.1.6
Cisco Adaptive Security Appliance Software=9.1.6.1
Cisco Adaptive Security Appliance Software=9.1.6.4
Cisco Adaptive Security Appliance Software=9.1.6.6
Cisco Adaptive Security Appliance Software=9.1.6.8
Cisco Adaptive Security Appliance Software=9.1.6.10
Cisco Adaptive Security Appliance Software=9.2\(0.0\)
Cisco Adaptive Security Appliance Software=9.2\(0.104\)
Cisco Adaptive Security Appliance Software=9.2\(3.1\)
Cisco Adaptive Security Appliance Software=9.2.1
Cisco Adaptive Security Appliance Software=9.2.2
Cisco Adaptive Security Appliance Software=9.2.2.4
Cisco Adaptive Security Appliance Software=9.2.2.7
Cisco Adaptive Security Appliance Software=9.2.2.8
Cisco Adaptive Security Appliance Software=9.2.3
Cisco Adaptive Security Appliance Software=9.2.3.3
Cisco Adaptive Security Appliance Software=9.2.3.4
Cisco Adaptive Security Appliance Software=9.2.4
Cisco Adaptive Security Appliance Software=9.2.4.2
Cisco Adaptive Security Appliance Software=9.2.4.4
Cisco Adaptive Security Appliance Software=9.3\(1.50\)
Cisco Adaptive Security Appliance Software=9.3\(1.105\)
Cisco Adaptive Security Appliance Software=9.3\(2.100\)
Cisco Adaptive Security Appliance Software=9.3\(2.243\)
Cisco Adaptive Security Appliance Software=9.3.1
Cisco Adaptive Security Appliance Software=9.3.1.1
Cisco Adaptive Security Appliance Software=9.3.2
Cisco Adaptive Security Appliance Software=9.3.2.2
Cisco Adaptive Security Appliance Software=9.3.3
Cisco Adaptive Security Appliance Software=9.3.3.1
Cisco Adaptive Security Appliance Software=9.3.3.2
Cisco Adaptive Security Appliance Software=9.3.3.5
Cisco Adaptive Security Appliance Software=9.3.3.6
Cisco Adaptive Security Appliance Software=9.3.5
Cisco Adaptive Security Appliance Software=9.4.0.115
Cisco Adaptive Security Appliance Software=9.4.1
Cisco Adaptive Security Appliance Software=9.4.1.1
Cisco Adaptive Security Appliance Software=9.4.1.2
Cisco Adaptive Security Appliance Software=9.4.1.3
Cisco Adaptive Security Appliance Software=9.4.1.5
Cisco Adaptive Security Appliance Software=9.4.2
Cisco Adaptive Security Appliance Software=9.4.2.3
Cisco Asa 1000v Cloud Firewall Software=8.7.1
Cisco Asa 1000v Cloud Firewall Software=8.7.1.1
All of the following
Cisco Pix Firewall Software
Any of the following
Cisco Pix Firewall 501
Cisco Pix Firewall 506
Cisco Pix Firewall 506e
Cisco PIX Firewall 515
Cisco Pix Firewall 515e
Cisco Pix Firewall 520
Cisco Pix Firewall 525
Cisco Pix Firewall 535
All of the following
Any of the following
Cisco Adaptive Security Appliance Software>=7.2.1<9.0.4.40
Cisco Adaptive Security Appliance Software>=9.1.1<9.1.7\(9\)
Cisco Adaptive Security Appliance Software>=9.2.0<9.2.4\(14\)
Cisco Adaptive Security Appliance Software>=9.3.0<9.3.3\(10\)
Cisco Adaptive Security Appliance Software>=9.4.0.115<9.4.3\(8\)
Cisco Adaptive Security Appliance Software>=9.5.0<=9.5\(3\)
Cisco Adaptive Security Appliance Software>=9.6.0<9.6.1\(11\)
Any of the following
Cisco 7604
Cisco 7606-s
Cisco 7609-s
Cisco 7613-s
Cisco ASA 5500
Cisco ASA 5500-X
Cisco Asa 5500 Csc-ssm
Cisco Asa 5505
Cisco ASA 5506-X
Cisco Asa 5506h-x
Cisco Asa 5506w-x
Cisco ASA 5508-X
Cisco Asa 5510
Cisco Asa 5512-x
Cisco Asa 5515-x
Cisco ASA 5516-X
Cisco Asa 5520
Cisco Asa 5525-x
Cisco Asa 5540
Cisco Asa 5545-x
Cisco Asa 5550
Cisco Asa 5555-x
Cisco Asa 5580
Cisco Asa 5585-x
Cisco Catalyst 6500
Cisco Catalyst 6500-e
Cisco Catalyst 6503-e
Cisco Catalyst 6504-e
Cisco Catalyst 6506-e
Cisco Catalyst 6509-e
Cisco Catalyst 6509-neb-a
Cisco Catalyst 6509-v-e
Cisco Catalyst 6513
Cisco Catalyst 6513-e

Event History

Aug 18, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:59 PM
DescriptionSeverityWeaknessAffected Software
May 24, 2022
Known Exploited
via CISA·12:00 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2016-6366?

CVE-2016-6366 has been rated as a critical vulnerability due to its potential to allow remote code execution.

2

How do I fix CVE-2016-6366?

To fix CVE-2016-6366, it is recommended to update Cisco ASA software to a version that is not affected by this vulnerability.

3

What are the affected versions for CVE-2016-6366?

CVE-2016-6366 affects Cisco Adaptive Security Appliance (ASA) software versions prior to 9.4.2.

4

Can CVE-2016-6366 lead to unauthorized access?

Yes, CVE-2016-6366 can potentially lead to unauthorized access and exploitation if left unpatched.

5

What type of vulnerability is CVE-2016-6366?

CVE-2016-6366 is classified as a buffer overflow vulnerability specifically in the SNMP code of Cisco ASA software.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203