Lucene search

CiscoCVE-2013-6707

HistoryDec 07, 2013 - 5:33 a.m.

CVE-2013-6707

2013-12-0705:33:32

CWE-772

cisco

web.nvd.nist.gov

cisco

asa

software

memory leak

denial of service

cve-2013-6707

bug id cscug33233

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.

Affected configurations

Nvd

Node

ciscoadaptive_security_appliance_softwareRange≤9.1\(3\)

VendorProductVersionCPE
ciscoadaptive_security_appliance_software*cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	adaptive_security_appliance_software	*	cpe:2.3:a:cisco:adaptive_security_appliance_software::::::::

References

osvdb.org/100682

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6707

tools.cisco.com/security/center/viewAlert.x?alertId=32065

www.securityfocus.com/bid/64148

www.securitytracker.com/id/1029441

exchange.xforce.ibmcloud.com/vulnerabilities/89442

Social References

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON

Related for CVE-2013-6707