Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can create a memory leak in SSL VPN of Cisco ASA, in
order to trigger a denial of service.

Impacted products: ASA

Severity: 2/4

Creation date: 27/11/2014

DESCRIPTION OF THE VULNERABILITY

The Cisco ASA product offers a SSL VPN service.

However, the memory allocated to process some HTTP packets is
never freed.

An attacker can therefore create a memory leak in SSL VPN of Cisco
ASA, in order to trigger a denial of service.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Cisco-ASA-memory-leak-via-SSL-VPN-15713