CVE-2008-2734

2008-09-0416:41:00

CWE-399

cisco

web.nvd.nist.gov

cisco

asa 5500

cve-2008-2734

memory leak

ssl vpn

denial of service

nvd

bug id cscso66472

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.022

Percentile

89.7%

JSON

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.

Affected configurations

Nvd

Node

ciscoadaptive_security_appliance_5500Match8.0

ciscoadaptive_security_appliance_5500Match8.1

VendorProductVersionCPE
ciscoadaptive_security_appliance_55008.0cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_55008.1cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	adaptive_security_appliance_5500	8.0	cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:::::::*
cisco	adaptive_security_appliance_5500	8.1	cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:::::::*