cisco-sa-esa-resource-exhaust-D7RQAhnD: Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability
First published: Wed Mar 04 2020(Updated: )
A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated remote attacker to exhaust resources on an affected device. The vulnerability is due to insufficient control over system memory allocation. An attacker could exploit this vulnerability by sending a crafted email through the targeted device. A successful exploit could allow the attacker to cause an email attachment that contains malware to be delivered to a user and cause email processing delays. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-resource-exhaust-D7RQAhnD
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Advanced Malware Protection for Endpoints | ||
| Cisco AsyncOS for Secure Email Gateway |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-esa-resource-exhaust-D7RQAhnD?
The severity of cisco-sa-esa-resource-exhaust-D7RQAhnD is high, as it allows unauthenticated remote attackers to exhaust resources on affected devices.
How do I fix cisco-sa-esa-resource-exhaust-D7RQAhnD?
To fix cisco-sa-esa-resource-exhaust-D7RQAhnD, users should apply the latest patches provided by Cisco for both the Advanced Malware Protection and AsyncOS Software.
What devices are affected by cisco-sa-esa-resource-exhaust-D7RQAhnD?
cisco-sa-esa-resource-exhaust-D7RQAhnD affects Cisco Email Security Appliances running the vulnerable versions of AsyncOS and Advanced Malware Protection.
Can cisco-sa-esa-resource-exhaust-D7RQAhnD be exploited remotely?
Yes, cisco-sa-esa-resource-exhaust-D7RQAhnD can be exploited remotely by an unauthenticated attacker.
Is there any workaround for cisco-sa-esa-resource-exhaust-D7RQAhnD?
There are no effective workarounds available for cisco-sa-esa-resource-exhaust-D7RQAhnD; patching is the recommended solution.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/title
- agent/author
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco advanced malware protection for endpoints
- canonical/cisco asyncos for secure email gateway