Lucene search

CiscoCVE-2014-3382

HistoryOct 10, 2014 - 10:55 a.m.

CVE-2014-3382

2014-10-1010:55:06

CWE-89

cisco

web.nvd.nist.gov

cisco

asa software

sql*net

inspection engine

denial of service

vulnerability

cve-2014-3382

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

56.2%

JSON

The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.5), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted SQL REDIRECT packets, aka Bug ID CSCum46027.

Affected configurations

Nvd

Node

ciscoasaMatch7.2.5

ciscoasaMatch7.2.5.10

ciscoasaMatch8.2.5

ciscoasaMatch8.2.5.13

ciscoasaMatch8.2.5.22

ciscoasaMatch8.2.5.26

ciscoasaMatch8.2.5.33

ciscoasaMatch8.2.5.41

ciscoasaMatch8.2.5.46

ciscoasaMatch8.2.5.48

ciscoasaMatch8.2.5.49

ciscoasaMatch8.3

ciscoasaMatch8.3.2.25

ciscoasaMatch8.4

ciscoasaMatch8.4.1

ciscoasaMatch8.4.2

ciscoasaMatch8.4.3

ciscoasaMatch8.4.4

ciscoasaMatch8.4.5

ciscoasaMatch8.4.6

ciscoasaMatch8.4.7

ciscoasaMatch8.5

ciscoasaMatch8.5.1.6

ciscoasaMatch8.6

ciscoasaMatch8.7

ciscoasaMatch9.0

ciscoasaMatch9.1

VendorProductVersionCPE
ciscoasa7.2.5cpe:2.3:a:cisco:asa:7.2.5:*:*:*:*:*:*:*
ciscoasa7.2.5.10cpe:2.3:a:cisco:asa:7.2.5.10:*:*:*:*:*:*:*
ciscoasa8.2.5cpe:2.3:a:cisco:asa:8.2.5:*:*:*:*:*:*:*
ciscoasa8.2.5.13cpe:2.3:a:cisco:asa:8.2.5.13:*:*:*:*:*:*:*
ciscoasa8.2.5.22cpe:2.3:a:cisco:asa:8.2.5.22:*:*:*:*:*:*:*
ciscoasa8.2.5.26cpe:2.3:a:cisco:asa:8.2.5.26:*:*:*:*:*:*:*
ciscoasa8.2.5.33cpe:2.3:a:cisco:asa:8.2.5.33:*:*:*:*:*:*:*
ciscoasa8.2.5.41cpe:2.3:a:cisco:asa:8.2.5.41:*:*:*:*:*:*:*
ciscoasa8.2.5.46cpe:2.3:a:cisco:asa:8.2.5.46:*:*:*:*:*:*:*
ciscoasa8.2.5.48cpe:2.3:a:cisco:asa:8.2.5.48:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	asa	7.2.5	cpe:2.3:a:cisco:asa:7.2.5:::::::*
cisco	asa	7.2.5.10	cpe:2.3:a:cisco:asa:7.2.5.10:::::::*
cisco	asa	8.2.5	cpe:2.3:a:cisco:asa:8.2.5:::::::*
cisco	asa	8.2.5.13	cpe:2.3:a:cisco:asa:8.2.5.13:::::::*
cisco	asa	8.2.5.22	cpe:2.3:a:cisco:asa:8.2.5.22:::::::*
cisco	asa	8.2.5.26	cpe:2.3:a:cisco:asa:8.2.5.26:::::::*
cisco	asa	8.2.5.33	cpe:2.3:a:cisco:asa:8.2.5.33:::::::*
cisco	asa	8.2.5.41	cpe:2.3:a:cisco:asa:8.2.5.41:::::::*
cisco	asa	8.2.5.46	cpe:2.3:a:cisco:asa:8.2.5.46:::::::*
cisco	asa	8.2.5.48	cpe:2.3:a:cisco:asa:8.2.5.48:::::::*