cisco-sa-20190501-asa-ftdtcp-dos: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability
A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to an error in TCP-based packet inspection, which could cause the TCP packet to have an invalid Layer 2 (L2)-formatted header. An attacker could exploit this vulnerability by sending a crafted TCP packet sequence to the targeted device. A successful exploit could allow the attacker to cause a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-ftdtcp-dos
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190501-asa-ftdtcp-dos?
The severity of cisco-sa-20190501-asa-ftdtcp-dos is considered high due to its potential to cause a denial of service.
How do I fix cisco-sa-20190501-asa-ftdtcp-dos?
To fix cisco-sa-20190501-asa-ftdtcp-dos, upgrade your Cisco ASA or FTD software to the recommended versions listed by Cisco.
What devices are affected by cisco-sa-20190501-asa-ftdtcp-dos?
Affected devices include Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software running vulnerable versions.
Can cisco-sa-20190501-asa-ftdtcp-dos be exploited remotely?
Yes, cisco-sa-20190501-asa-ftdtcp-dos can be exploited by an unauthenticated remote attacker.
What impact does cisco-sa-20190501-asa-ftdtcp-dos have?
The impact of cisco-sa-20190501-asa-ftdtcp-dos is that it can cause the affected device to restart unexpectedly, leading to a denial of service.