Cisco Adaptive Security Appliance Software denial of service

NAME

Cisco Adaptive Security Appliance Software denial of service

Platforms Affected:
Cisco Adaptive Security Appliance Software 8.2(1)
Cisco Adaptive Security Appliance Software 8.2(2)
Cisco Adaptive Security Appliance Software 8.2(3)
Cisco Adaptive Security Appliance Software 8.3(1)
Cisco Adaptive Security Appliance Software 8.2(3.9)
Cisco Adaptive Security Appliance Software 8.2(4)
Cisco Adaptive Security Appliance Software 7.0
Cisco Adaptive Security Appliance Software 7.0(0)
Cisco Adaptive Security Appliance Software 7.0(2)
Cisco Adaptive Security Appliance Software 7.0(4)
Cisco Adaptive Security Appliance Software 7.0(5)
Cisco Adaptive Security Appliance Software 7.0(5.2)
Cisco Adaptive Security Appliance Software 7.0(6.7)
Cisco Adaptive Security Appliance Software 7.0.1
Cisco Adaptive Security Appliance Software 7.0.1.4
Cisco Adaptive Security Appliance Software 7.0.2
Cisco Adaptive Security Appliance Software 7.0.4
Cisco Adaptive Security Appliance Software 7.0.4.3
Cisco Adaptive Security Appliance Software 7.0.5
Cisco Adaptive Security Appliance Software 7.0.6
Cisco Adaptive Security Appliance Software 7.0.7
Cisco Adaptive Security Appliance Software 7.0.8
Cisco Adaptive Security Appliance Software 7.0.8 Interim
Cisco Adaptive Security Appliance Software 7.1
Cisco Adaptive Security Appliance Software 7.1(2)
Cisco Adaptive Security Appliance Software 7.1(2.27)
Cisco Adaptive Security Appliance Software 7.1(2.48)
Cisco Adaptive Security Appliance Software 7.1(2.49)
Cisco Adaptive Security Appliance Software 7.1(2.5)
Cisco Adaptive Security Appliance Software 7.1(5)
Cisco Adaptive Security Appliance Software 7.1.1
Cisco Adaptive Security Appliance Software 7.1.2
Cisco Adaptive Security Appliance Software 7.2
Cisco Adaptive Security Appliance Software 7.2(1)
Cisco Adaptive Security Appliance Software 7.2(1.22)
Cisco Adaptive Security Appliance Software 7.2(2)
Cisco Adaptive Security Appliance Software 7.2(2.10)
Cisco Adaptive Security Appliance Software 7.2(2.14)
Cisco Adaptive Security Appliance Software 7.2(2.15)
Cisco Adaptive Security Appliance Software 7.2(2.16)
Cisco Adaptive Security Appliance Software 7.2(2.17)
Cisco Adaptive Security Appliance Software 7.2(2.18)
Cisco Adaptive Security Appliance Software 7.2(2.19)
Cisco Adaptive Security Appliance Software 7.2(2.48)
Cisco Adaptive Security Appliance Software 7.2(2.5)
Cisco Adaptive Security Appliance Software 7.2(2.7)
Cisco Adaptive Security Appliance Software 7.2(2.8)
Cisco Adaptive Security Appliance Software 7.2.1
Cisco Adaptive Security Appliance Software 7.2.2
Cisco Adaptive Security Appliance Software 7.2.3
Cisco Adaptive Security Appliance Software 7.2.4
Cisco Adaptive Security Appliance Software 7.2.5
Cisco Adaptive Security Appliance Software 8.0
Cisco Adaptive Security Appliance Software 8.0.2
Cisco Adaptive Security Appliance Software 8.0.3
Cisco Adaptive Security Appliance Software 8.0.4
Cisco Adaptive Security Appliance Software 8.0.5
Cisco Adaptive Security Appliance Software 8.2.1
Cisco Adaptive Security Appliance Software 8.2.2
Cisco Adaptive Security Appliance Software 8.2.2 Interim
Cisco Adaptive Security Appliance Software 8.2.3
Cisco Adaptive Security Appliance Software 8.3.1
Cisco Adaptive Security Appliance Software 8.3.1 Interim
Cisco Adaptive Security Appliance Software 8.3.2
Cisco Adaptive Security Appliance Software 7.0(1)
Cisco Adaptive Security Appliance Software 7.0(6)
Cisco Adaptive Security Appliance Software 7.0(7)
Cisco Adaptive Security Appliance Software 7.0(8)
Cisco Adaptive Security Appliance Software 7.2(3)
Cisco Adaptive Security Appliance Software 7.2(4)
Cisco Adaptive Security Appliance Software 7.2(5)
Cisco Adaptive Security Appliance Software 8.0(2)
Cisco Adaptive Security Appliance Software 8.0(3)
Cisco Adaptive Security Appliance Software 8.0(4)
Cisco Adaptive Security Appliance Software 8.1
Cisco Adaptive Security Appliance Software 8.2(4.1)
Cisco Adaptive Security Appliance Software 8.2(4.4)
Cisco Adaptive Security Appliance Software 8.4(1)
Cisco Adaptive Security Appliance Software 8.4(2)
Cisco Adaptive Security Appliance Software 8.4(1.11)
Cisco Adaptive Security Appliance Software 8.5(1)
Cisco Adaptive Security Appliance Software 8.5
Cisco Adaptive Security Appliance Software 8.3(2)
Cisco Adaptive Security Appliance Software 8.2(5)
Cisco Adaptive Security Appliance Software 8.0(5)
Cisco Adaptive Security Appliance Software 8.4
Cisco Adaptive Security Appliance Software 8.4(2.11)
Cisco Adaptive Security Appliance Software 8.5(1.4)
Cisco Adaptive Security Appliance Software 8.2
Cisco Adaptive Security Appliance Software 8.7.1
Cisco Adaptive Security Appliance Software 8.7.1.1
Cisco Adaptive Security Appliance Software
Cisco Adaptive Security Appliance Software 8.4(5)
Cisco Adaptive Security Appliance Software 9.1(1)
Cisco Adaptive Security Appliance Software 8.4(0.3)
Cisco Adaptive Security Appliance Software 9.0
Cisco Adaptive Security Appliance Software 9.0(1)
Cisco Adaptive Security Appliance Software 9.0(2)
Cisco Adaptive Security Appliance Software 9.0(3)
Cisco Adaptive Security Appliance Software 8.7
Cisco Adaptive Security Appliance Software 8.7(1.1)
Cisco Adaptive Security Appliance Software 8.7(1.3)
Cisco Adaptive Security Appliance Software 9.1
Cisco Adaptive Security Appliance Software 9.1(1.7)
Cisco Adaptive Security Appliance Software 9.1(2)
Cisco Adaptive Security Appliance Software 8.4(3)
Cisco Adaptive Security Appliance Software 8.4(4.11)
Cisco Adaptive Security Appliance Software 8.4(6)
Cisco Adaptive Security Appliance Software 8.6(1.3)
Cisco Adaptive Security Appliance Software 8.6(1.10)
Cisco Adaptive Security Appliance Software 8.6(1)
Cisco Adaptive Security Appliance Software 8.6
Cisco Adaptive Security Appliance Software 8.5(1.17)
Cisco Adaptive Security Appliance Software 8.3(2.37)
Cisco Adaptive Security Appliance Software 8.3(2.34)
Cisco Adaptive Security Appliance Software 8.2(5.38)
Cisco Adaptive Security Appliance Software 8.2(5.35)
Cisco Adaptive Security Appliance Software 8.0(5.31)
Cisco Adaptive Security Appliance Software 8.0(5.28)
Cisco Adaptive Security Appliance Software 9.1(3)
Cisco Adaptive Security Appliance Software 9.4.3.1
Cisco Adaptive Security Appliance Software 9.4.3.2
Cisco Adaptive Security Appliance Software 9.4.4
Cisco Adaptive Security Appliance Software 9.4.4.13
Cisco Adaptive Security Appliance Software 9.5.2.7
Cisco Adaptive Security Appliance Software 9.5.2.8
Cisco Adaptive Security Appliance Software 9.5.3.7
Cisco Adaptive Security Appliance Software 9.5.3.9
Cisco Adaptive Security Appliance Software 9.6.2.9
Cisco Adaptive Security Appliance Software 9.6.2.21
Cisco Adaptive Security Appliance Software 9.6.3
Cisco Adaptive Security Appliance Software 9.6.3.17
Cisco Adaptive Security Appliance Software 9.7(1)4
Cisco Firepower Threat Defense (FTD) Software 6.2.0
Cisco Firepower Threat Defense (FTD) Software 6.2.1
Cisco Firepower Threat Defense (FTD) Software 6.2.2
Cisco Firepower Threat Defense (FTD) Software 6.2.3
Cisco Firepower Threat Defense (FTD) Software 6.5.0
Cisco Firepower Threat Defense (FTD) Software 6.3.0
Cisco Firepower Threat Defense (FTD) Software 6.4.0
Cisco Firepower Threat Defense (FTD) Software 7.0.1
Risk Level:
8.6
Exploitability:
Unproven
Consequences:
Denial of Service

DESCRIPTION

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software are vulnerable to a denial of service, caused by improper processing of incoming requests in the DNS inspection handler. By sending specially crafted DNS requests at a high rate to an affected device, a remote attacker could exploit this vulnerability to cause the device to stop responding

CVSS 3.0 Information

Privileges Required: None
User Interaction: None
Scope: Changed
Access Vector: Network
Access Complexity: Low
Confidentiality Impact: None
Integrity Impact: None
Availability Impact: High
Remediation Level: Official Fix

MITIGATION

Refer to Cisco Security Advisory cisco-sa-asaftd-dos-nJVAwOeq for patch, upgrade or suggested workaround information. See References.

Reference Link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dos-nJVAwOeq
Reference Link:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20760

If you like the site, please consider joining the telegram channel and supporting us on Patreon using the button below.