cisco-sa-20180815-wsa-dos: Cisco Web Security Appliance Web Proxy Memory Exhaustion Denial of Service Vulnerability
First published: Wed Aug 15 2018(Updated: )
A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability exists because the affected software improperly manages memory resources for TCP connections to a targeted device. An attacker could exploit this vulnerability by establishing a high number of TCP connections to the data interface of an affected device via IPv4 or IPv6. A successful exploit could allow the attacker to exhaust system memory, which could cause the system to stop processing new connections and result in a DoS condition. System recovery may require manual intervention. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-wsa-dos
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AsyncOS Software | =11.0<11.5.0-614=10.5<10.5.2-072=10.1<10.1.3-054=9.1<Migrate to 10.1.3-054 or later=Prior to 9.1<Migrate to 10.1.3-054 or later | 11.5.0-614 10.5.2-072 10.1.3-054 Migrate to 10.1.3-054 or later Migrate to 10.1.3-054 or later |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20180815-wsa-dos?
The severity of cisco-sa-20180815-wsa-dos is high due to its potential to cause a denial of service (DoS) condition.
How do I fix cisco-sa-20180815-wsa-dos?
To fix cisco-sa-20180815-wsa-dos, upgrade to AsyncOS version 10.1.3-054 or later.
What products are affected by cisco-sa-20180815-wsa-dos?
Cisco AsyncOS Software versions prior to 10.1.3-054 on Web Security Appliances are affected by cisco-sa-20180815-wsa-dos.
Can cisco-sa-20180815-wsa-dos be exploited remotely?
Yes, cisco-sa-20180815-wsa-dos can be exploited by unauthenticated remote attackers.
What type of vulnerability is cisco-sa-20180815-wsa-dos?
cisco-sa-20180815-wsa-dos is a denial of service (DoS) vulnerability.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/title
- agent/severity
- agent/softwarecombine
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco asyncos software
- version/cisco asyncos software/11.0
- version/cisco asyncos software/10.5
- version/cisco asyncos software/10.1
- version/cisco asyncos software/9.1
- version/cisco asyncos software/prior to 9.1