A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the af…
Summary
A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device. An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on th…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Lint boundary warnings (8)
The following non-blocking warnings were raised during the lint phase of this triage (e.g. reference URLs not yet on the allowlist). They do not affect entry usability and are disclosed for transparency (see DR-002).
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.securityfocus.com/bid/102845 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.securitytracker.com/id/1040292 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cisco-bug-cscvg35618/ -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://pastebin.com/YrBcG2Ln -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.securityfocus.com/bid/102845 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.securitytracker.com/id/1040292 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cisco-bug-cscvg35618/ -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://pastebin.com/YrBcG2Ln
Sources
- NVD DATABASE
Original Links
- http://www.securityfocus.com/bid/102845 Third Party Advisory
- http://www.securitytracker.com/id/1040292 Third Party Advisory
- https://icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cisco-bug-cscvg35618/ Third Party Advisory
- https://pastebin.com/YrBcG2Ln Exploit
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1 Vendor Advisory
- https://www.exploit-db.com/exploits/43986/ Exploit
- http://www.securityfocus.com/bid/102845 Third Party Advisory
- http://www.securitytracker.com/id/1040292 Third Party Advisory
- https://icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cisco-bug-cscvg35618/ Third Party Advisory
- https://pastebin.com/YrBcG2Ln Exploit
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1 Vendor Advisory
- https://www.exploit-db.com/exploits/43986/ Exploit
Timeline
- nvd_ingest NVD