CVE-2019-1708— Cisco Adaptive Security Appliance Software和Firepower Threat Defense Software 安全漏洞

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to the incorrect processing of certain MOBIKE packets. An attacker could exploit this vulnerability by sending crafted MOBIKE packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. The MOBIKE feature is supported only for IPv4 addresses.

N/A

不恰当的资源关闭或释放

Cisco Adaptive Security Appliance Software和Firepower Threat Defense Software 安全漏洞

Cisco Nexus 5500 Series Switches等都是美国思科（Cisco）公司的产品。Cisco Nexus 5500 Series Switches是一款5500系列的交换机产品。Cisco Firepower 4100 Series是一款4100系列的防火墙设备。FTD Software是其中的一套提供下一代防火墙服务的统一软件。Cisco 3000 Series Industrial Security Appliances是一款3000系列防火墙设备。ASA Software是其中

N/A

N/A