Cisco Adaptive Security Appliance Software Ssl Tls Dos Cisco Sa Asa Ssl Vpn Dos Qy7bhpjn

A vulnerability in the secure sockets layer ssl transport layer security tls handler of cisco adaptive security appliance asa software and cisco firepower threat defense ftd software could allow an unauthenticated remote attacker to exhaust memory resources on the affected device leading to a denial of service dos condition.

Cisco adaptive security appliance software ssl tls dos cisco sa asa ssl vpn dos qy7bhpjn.

The vulnerability is due to incorrect handling of base64 encoded strings. The vulnerability is due to improper resource management. A vulnerability in the secure sockets layer ssl vpn feature of cisco adaptive security appliance asa software could allow an authenticated remote attacker to cause a denial of service dos condition that prevents the creation of new ssl transport layer security tls connections to an affected device. A vulnerability in the transport layer security tls library of cisco adaptive security appliance asa software and cisco firepower threat defense ftd software could allow an unauthenticated remote attacker to trigger a reload of the affected device resulting in a denial of service dos condition.

The vulnerability is due to incomplete input validation of a secure sockets layer ssl or transport layer security tls ingress packet header. A vulnerability in the cryptographic driver for cisco adaptive security appliance software asa and firepower threat defense ftd software could allow an unauthenticated remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incorrect handling of base64 encoded strings. The vulnerability is due to insufficient validation of user supplied input.

A vulnerability in the secure sockets layer ssl transport layer security tls handler of cisco adaptive security appliance asa software and cisco firepower threat defense ftd software could allow an unauthenticated remote attacker to exhaust memory resources on the affected device leading to a denial of service dos condition.