vulnti.work

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the af…

严重 CVSS 10.0
CVECVE-2018-0101
首次发现2026-08-11 20:15 UTC
披露时间2018-01-29 20:29 UTC
最后更新2026-08-13 18:00 UTC
通道状态draft

摘要

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device. An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on th…

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判 · 自动通道

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

受影响产品

  • :
  • :
Lint 边界警告 (8)

以下是本次研判 lint 阶段发现的非阻塞性警告（如引用 URL 未在白名单内）。这些不影响漏洞条目可用性，仅为透明度披露（参 DR-002）。

  • REF_URL_NOT_ALLOWLISTED url not in allowlist: http://www.securityfocus.com/bid/102845
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: http://www.securitytracker.com/id/1040292
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cisco-bug-cscvg35618/
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://pastebin.com/YrBcG2Ln
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: http://www.securityfocus.com/bid/102845
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: http://www.securitytracker.com/id/1040292
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cisco-bug-cscvg35618/
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://pastebin.com/YrBcG2Ln

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD