Cisco Adaptive Security Appliance Software denial of service | CVE-2022-20760
NAME
Cisco Adaptive Security Appliance Software denial of service
- Platforms Affected:
Cisco Adaptive Security Appliance Software 8.2(1)
Cisco Adaptive Security Appliance Software 8.2(2)
Cisco Adaptive Security Appliance Software 8.2(3)
Cisco Adaptive Security Appliance Software 8.3(1)
Cisco Adaptive Security Appliance Software 8.2(3.9)
Cisco Adaptive Security Appliance Software 8.2(4)
Cisco Adaptive Security Appliance Software 7.0
Cisco Adaptive Security Appliance Software 7.0(0)
Cisco Adaptive Security Appliance Software 7.0(2)
Cisco Adaptive Security Appliance Software 7.0(4)
Cisco Adaptive Security Appliance Software 7.0(5)
Cisco Adaptive Security Appliance Software 7.0(5.2)
Cisco Adaptive Security Appliance Software 7.0(6.7)
Cisco Adaptive Security Appliance Software 7.0.1
Cisco Adaptive Security Appliance Software 7.0.1.4
Cisco Adaptive Security Appliance Software 7.0.2
Cisco Adaptive Security Appliance Software 7.0.4
Cisco Adaptive Security Appliance Software 7.0.4.3
Cisco Adaptive Security Appliance Software 7.0.5
Cisco Adaptive Security Appliance Software 7.0.6
Cisco Adaptive Security Appliance Software 7.0.7
Cisco Adaptive Security Appliance Software 7.0.8
Cisco Adaptive Security Appliance Software 7.0.8 Interim
Cisco Adaptive Security Appliance Software 7.1
Cisco Adaptive Security Appliance Software 7.1(2)
Cisco Adaptive Security Appliance Software 7.1(2.27)
Cisco Adaptive Security Appliance Software 7.1(2.48)
Cisco Adaptive Security Appliance Software 7.1(2.49)
Cisco Adaptive Security Appliance Software 7.1(2.5)
Cisco Adaptive Security Appliance Software 7.1(5)
Cisco Adaptive Security Appliance Software 7.1.1
Cisco Adaptive Security Appliance Software 7.1.2
Cisco Adaptive Security Appliance Software 7.2
Cisco Adaptive Security Appliance Software 7.2(1)
Cisco Adaptive Security Appliance Software 7.2(1.22)
Cisco Adaptive Security Appliance Software 7.2(2)
Cisco Adaptive Security Appliance Software 7.2(2.10)
Cisco Adaptive Security Appliance Software 7.2(2.14)
Cisco Adaptive Security Appliance Software 7.2(2.15)
Cisco Adaptive Security Appliance Software 7.2(2.16)
Cisco Adaptive Security Appliance Software 7.2(2.17)
Cisco Adaptive Security Appliance Software 7.2(2.18)
Cisco Adaptive Security Appliance Software 7.2(2.19)
Cisco Adaptive Security Appliance Software 7.2(2.48)
Cisco Adaptive Security Appliance Software 7.2(2.5)
Cisco Adaptive Security Appliance Software 7.2(2.7)
Cisco Adaptive Security Appliance Software 7.2(2.8)
Cisco Adaptive Security Appliance Software 7.2.1
Cisco Adaptive Security Appliance Software 7.2.2
Cisco Adaptive Security Appliance Software 7.2.3
Cisco Adaptive Security Appliance Software 7.2.4
Cisco Adaptive Security Appliance Software 7.2.5
Cisco Adaptive Security Appliance Software 8.0
Cisco Adaptive Security Appliance Software 8.0.2
Cisco Adaptive Security Appliance Software 8.0.3
Cisco Adaptive Security Appliance Software 8.0.4
Cisco Adaptive Security Appliance Software 8.0.5
Cisco Adaptive Security Appliance Software 8.2.1
Cisco Adaptive Security Appliance Software 8.2.2
Cisco Adaptive Security Appliance Software 8.2.2 Interim
Cisco Adaptive Security Appliance Software 8.2.3
Cisco Adaptive Security Appliance Software 8.3.1
Cisco Adaptive Security Appliance Software 8.3.1 Interim
Cisco Adaptive Security Appliance Software 8.3.2
Cisco Adaptive Security Appliance Software 7.0(1)
Cisco Adaptive Security Appliance Software 7.0(6)
Cisco Adaptive Security Appliance Software 7.0(7)
Cisco Adaptive Security Appliance Software 7.0(8)
Cisco Adaptive Security Appliance Software 7.2(3)
Cisco Adaptive Security Appliance Software 7.2(4)
Cisco Adaptive Security Appliance Software 7.2(5)
Cisco Adaptive Security Appliance Software 8.0(2)
Cisco Adaptive Security Appliance Software 8.0(3)
Cisco Adaptive Security Appliance Software 8.0(4)
Cisco Adaptive Security Appliance Software 8.1
Cisco Adaptive Security Appliance Software 8.2(4.1)
Cisco Adaptive Security Appliance Software 8.2(4.4)
Cisco Adaptive Security Appliance Software 8.4(1)
Cisco Adaptive Security Appliance Software 8.4(2)
Cisco Adaptive Security Appliance Software 8.4(1.11)
Cisco Adaptive Security Appliance Software 8.5(1)
Cisco Adaptive Security Appliance Software 8.5
Cisco Adaptive Security Appliance Software 8.3(2)
Cisco Adaptive Security Appliance Software 8.2(5)
Cisco Adaptive Security Appliance Software 8.0(5)
Cisco Adaptive Security Appliance Software 8.4
Cisco Adaptive Security Appliance Software 8.4(2.11)
Cisco Adaptive Security Appliance Software 8.5(1.4)
Cisco Adaptive Security Appliance Software 8.2
Cisco Adaptive Security Appliance Software 8.7.1
Cisco Adaptive Security Appliance Software 8.7.1.1
Cisco Adaptive Security Appliance Software
Cisco Adaptive Security Appliance Software 8.4(5)
Cisco Adaptive Security Appliance Software 9.1(1)
Cisco Adaptive Security Appliance Software 8.4(0.3)
Cisco Adaptive Security Appliance Software 9.0
Cisco Adaptive Security Appliance Software 9.0(1)
Cisco Adaptive Security Appliance Software 9.0(2)
Cisco Adaptive Security Appliance Software 9.0(3)
Cisco Adaptive Security Appliance Software 8.7
Cisco Adaptive Security Appliance Software 8.7(1.1)
Cisco Adaptive Security Appliance Software 8.7(1.3)
Cisco Adaptive Security Appliance Software 9.1
Cisco Adaptive Security Appliance Software 9.1(1.7)
Cisco Adaptive Security Appliance Software 9.1(2)
Cisco Adaptive Security Appliance Software 8.4(3)
Cisco Adaptive Security Appliance Software 8.4(4.11)
Cisco Adaptive Security Appliance Software 8.4(6)
Cisco Adaptive Security Appliance Software 8.6(1.3)
Cisco Adaptive Security Appliance Software 8.6(1.10)
Cisco Adaptive Security Appliance Software 8.6(1)
Cisco Adaptive Security Appliance Software 8.6
Cisco Adaptive Security Appliance Software 8.5(1.17)
Cisco Adaptive Security Appliance Software 8.3(2.37)
Cisco Adaptive Security Appliance Software 8.3(2.34)
Cisco Adaptive Security Appliance Software 8.2(5.38)
Cisco Adaptive Security Appliance Software 8.2(5.35)
Cisco Adaptive Security Appliance Software 8.0(5.31)
Cisco Adaptive Security Appliance Software 8.0(5.28)
Cisco Adaptive Security Appliance Software 9.1(3)
Cisco Adaptive Security Appliance Software 9.4.3.1
Cisco Adaptive Security Appliance Software 9.4.3.2
Cisco Adaptive Security Appliance Software 9.4.4
Cisco Adaptive Security Appliance Software 9.4.4.13
Cisco Adaptive Security Appliance Software 9.5.2.7
Cisco Adaptive Security Appliance Software 9.5.2.8
Cisco Adaptive Security Appliance Software 9.5.3.7
Cisco Adaptive Security Appliance Software 9.5.3.9
Cisco Adaptive Security Appliance Software 9.6.2.9
Cisco Adaptive Security Appliance Software 9.6.2.21
Cisco Adaptive Security Appliance Software 9.6.3
Cisco Adaptive Security Appliance Software 9.6.3.17
Cisco Adaptive Security Appliance Software 9.7(1)4
Cisco Firepower Threat Defense (FTD) Software 6.2.0
Cisco Firepower Threat Defense (FTD) Software 6.2.1
Cisco Firepower Threat Defense (FTD) Software 6.2.2
Cisco Firepower Threat Defense (FTD) Software 6.2.3
Cisco Firepower Threat Defense (FTD) Software 6.5.0
Cisco Firepower Threat Defense (FTD) Software 6.3.0
Cisco Firepower Threat Defense (FTD) Software 6.4.0
Cisco Firepower Threat Defense (FTD) Software 7.0.1 - Risk Level:
8.6 - Exploitability:
Unproven - Consequences:
Denial of Service
DESCRIPTION
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software are vulnerable to a denial of service, caused by improper processing of incoming requests in the DNS inspection handler. By sending specially crafted DNS requests at a high rate to an affected device, a remote attacker could exploit this vulnerability to cause the device to stop responding
CVSS 3.0 Information
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Access Vector: Network
- Access Complexity: Low
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
- Remediation Level: Official Fix
MITIGATION
Refer to Cisco Security Advisory cisco-sa-asaftd-dos-nJVAwOeq for patch, upgrade or suggested workaround information. See References.
- Reference Link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dos-nJVAwOeq - Reference Link:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20760
If you like the site, please consider joining the telegram channel and supporting us on Patreon using the button below.
