CVE-2015-0676

The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before 8.5(1.24), 8.6 before 8.6(1.17), 8.7 before 8.7(1.16), 9.0 before 9.0(4.33), 9.1 before 9.1(6.1), 9.2 before 9.2(3.4), and 9.3 before 9.3(3) allows man-in-the-middle attackers to cause a denial of service (memory consumption or device outage) by triggering outbound DNS queries and then sending crafted responses to these queries, aka Bug ID CSCuq77655.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.1 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:C
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
VendorProductVersion
ciscoadaptive_security_appliance_software
7.0.1
ciscoadaptive_security_appliance_software
7.0.1.4
ciscoadaptive_security_appliance_software
7.0.2
ciscoadaptive_security_appliance_software
7.0.3
ciscoadaptive_security_appliance_software
7.0.4
ciscoadaptive_security_appliance_software
7.0.4.2
ciscoadaptive_security_appliance_software
7.0.5
ciscoadaptive_security_appliance_software
7.0.5.12
ciscoadaptive_security_appliance_software
7.0.6
ciscoadaptive_security_appliance_software
7.0.6.4
ciscoadaptive_security_appliance_software
7.0.6.8
ciscoadaptive_security_appliance_software
7.0.6.18
ciscoadaptive_security_appliance_software
7.0.6.22
ciscoadaptive_security_appliance_software
7.0.6.26
ciscoadaptive_security_appliance_software
7.0.6.29
ciscoadaptive_security_appliance_software
7.0.6.32
ciscoadaptive_security_appliance_software
7.0.7
ciscoadaptive_security_appliance_software
7.0.7.1
ciscoadaptive_security_appliance_software
7.0.7.4
ciscoadaptive_security_appliance_software
7.0.7.9
ciscoadaptive_security_appliance_software
7.0.7.12
ciscoadaptive_security_appliance_software
7.0.8
ciscoadaptive_security_appliance_software
7.0.8.2
ciscoadaptive_security_appliance_software
7.0.8.8
ciscoadaptive_security_appliance_software
7.0.8.12
ciscoadaptive_security_appliance_software
7.0.8.13
ciscoadaptive_security_appliance_software
7.1.2
ciscoadaptive_security_appliance_software
7.1.2.16
ciscoadaptive_security_appliance_software
7.1.2.20
ciscoadaptive_security_appliance_software
7.1.2.24
ciscoadaptive_security_appliance_software
7.1.2.28
ciscoadaptive_security_appliance_software
7.1.2.38
ciscoadaptive_security_appliance_software
7.1.2.42
ciscoadaptive_security_appliance_software
7.1.2.46
ciscoadaptive_security_appliance_software
7.1.2.49
ciscoadaptive_security_appliance_software
7.1.2.53
ciscoadaptive_security_appliance_software
7.1.2.61
ciscoadaptive_security_appliance_software
7.1.2.64
ciscoadaptive_security_appliance_software
7.1.2.72
ciscoadaptive_security_appliance_software
7.1.2.81
ciscoadaptive_security_appliance_software
7.2.1
ciscoadaptive_security_appliance_software
7.2.1.9
ciscoadaptive_security_appliance_software
7.2.1.13
ciscoadaptive_security_appliance_software
7.2.1.19
ciscoadaptive_security_appliance_software
7.2.1.24
ciscoadaptive_security_appliance_software
7.2.2
ciscoadaptive_security_appliance_software
7.2.2.6
ciscoadaptive_security_appliance_software
7.2.2.10
ciscoadaptive_security_appliance_software
7.2.2.14
ciscoadaptive_security_appliance_software
7.2.2.18
ciscoadaptive_security_appliance_software
7.2.2.19
ciscoadaptive_security_appliance_software
7.2.2.22
ciscoadaptive_security_appliance_software
7.2.2.34
ciscoadaptive_security_appliance_software
7.2.3
ciscoadaptive_security_appliance_software
7.2.3.1
ciscoadaptive_security_appliance_software
7.2.3.12
ciscoadaptive_security_appliance_software
7.2.3.16
ciscoadaptive_security_appliance_software
7.2.4
ciscoadaptive_security_appliance_software
7.2.4.6
ciscoadaptive_security_appliance_software
7.2.4.9
ciscoadaptive_security_appliance_software
7.2.4.18
ciscoadaptive_security_appliance_software
7.2.4.25
ciscoadaptive_security_appliance_software
7.2.4.27
ciscoadaptive_security_appliance_software
7.2.4.30
ciscoadaptive_security_appliance_software
7.2.4.33
ciscoadaptive_security_appliance_software
7.2.5
ciscoadaptive_security_appliance_software
7.2.5.2
ciscoadaptive_security_appliance_software
7.2.5.4
ciscoadaptive_security_appliance_software
7.2.5.7
ciscoadaptive_security_appliance_software
7.2.5.8
ciscoadaptive_security_appliance_software
7.2.5.10
ciscoadaptive_security_appliance_software
7.2.5.12
ciscoadaptive_security_appliance_software
8.0.1.2
ciscoadaptive_security_appliance_software
8.0.2
ciscoadaptive_security_appliance_software
8.0.2.11
ciscoadaptive_security_appliance_software
8.0.2.15
ciscoadaptive_security_appliance_software
8.0.3
ciscoadaptive_security_appliance_software
8.0.3.6
ciscoadaptive_security_appliance_software
8.0.3.12
ciscoadaptive_security_appliance_software
8.0.3.19
ciscoadaptive_security_appliance_software
8.0.4
ciscoadaptive_security_appliance_software
8.0.4.3
ciscoadaptive_security_appliance_software
8.0.4.9
ciscoadaptive_security_appliance_software
8.0.4.16
ciscoadaptive_security_appliance_software
8.0.4.23
ciscoadaptive_security_appliance_software
8.0.4.25
ciscoadaptive_security_appliance_software
8.0.4.28
ciscoadaptive_security_appliance_software
8.0.4.31
ciscoadaptive_security_appliance_software
8.0.4.32
ciscoadaptive_security_appliance_software
8.0.4.33
ciscoadaptive_security_appliance_software
8.0.5
ciscoadaptive_security_appliance_software
8.0.5.20
ciscoadaptive_security_appliance_software
8.0.5.23
ciscoadaptive_security_appliance_software
8.0.5.25
ciscoadaptive_security_appliance_software
8.0.5.27
ciscoadaptive_security_appliance_software
8.0.5.28
ciscoadaptive_security_appliance_software
8.0.5.31
ciscoadaptive_security_appliance_software
8.1.1
ciscoadaptive_security_appliance_software
8.1.1.6
ciscoadaptive_security_appliance_software
8.1.2
ciscoadaptive_security_appliance_software
8.1.2.13
ciscoadaptive_security_appliance_software
8.1.2.15
ciscoadaptive_security_appliance_software
8.1.2.16
ciscoadaptive_security_appliance_software
8.1.2.19
ciscoadaptive_security_appliance_software
8.1.2.23
ciscoadaptive_security_appliance_software
8.1.2.24
ciscoadaptive_security_appliance_software
8.1.2.49
ciscoadaptive_security_appliance_software
8.1.2.50
ciscoadaptive_security_appliance_software
8.1.2.55
ciscoadaptive_security_appliance_software
8.1.2.56
ciscoadaptive_security_appliance_software
8.2.0.45
ciscoadaptive_security_appliance_software
8.2.1
ciscoadaptive_security_appliance_software
8.2.1.11
ciscoadaptive_security_appliance_software
8.2.2
ciscoadaptive_security_appliance_software
8.2.2.9
ciscoadaptive_security_appliance_software
8.2.2.10
ciscoadaptive_security_appliance_software
8.2.2.12
ciscoadaptive_security_appliance_software
8.2.2.16
ciscoadaptive_security_appliance_software
8.2.2.17
ciscoadaptive_security_appliance_software
8.2.3
ciscoadaptive_security_appliance_software
8.2.4
ciscoadaptive_security_appliance_software
8.2.4.1
ciscoadaptive_security_appliance_software
8.2.4.4
ciscoadaptive_security_appliance_software
8.2.5
ciscoadaptive_security_appliance_software
8.2.5.13
ciscoadaptive_security_appliance_software
8.2.5.22
ciscoadaptive_security_appliance_software
8.2.5.26
ciscoadaptive_security_appliance_software
8.2.5.33
ciscoadaptive_security_appliance_software
8.2.5.40
ciscoadaptive_security_appliance_software
8.2.5.41
ciscoadaptive_security_appliance_software
8.2.5.46
ciscoadaptive_security_appliance_software
8.2.5.48
ciscoadaptive_security_appliance_software
8.2.5.50
ciscoadaptive_security_appliance_software
8.2.5.52
ciscoadaptive_security_appliance_software
8.2.5.55
ciscoadaptive_security_appliance_software
8.2.5.57
ciscoadaptive_security_appliance_software
8.3.1
ciscoadaptive_security_appliance_software
8.3.1.1
ciscoadaptive_security_appliance_software
8.3.1.4
ciscoadaptive_security_appliance_software
8.3.1.6
ciscoadaptive_security_appliance_software
8.3.2
ciscoadaptive_security_appliance_software
8.3.2.4
ciscoadaptive_security_appliance_software
8.3.2.13
ciscoadaptive_security_appliance_software
8.3.2.23
ciscoadaptive_security_appliance_software
8.3.2.25
ciscoadaptive_security_appliance_software
8.3.2.31
ciscoadaptive_security_appliance_software
8.3.2.33
ciscoadaptive_security_appliance_software
8.3.2.34
ciscoadaptive_security_appliance_software
8.3.2.37
ciscoadaptive_security_appliance_software
8.3.2.39
ciscoadaptive_security_appliance_software
8.3.2.40
ciscoadaptive_security_appliance_software
8.3.2.41
ciscoadaptive_security_appliance_software
8.3.2.44
ciscoadaptive_security_appliance_software
8.4.1
ciscoadaptive_security_appliance_software
8.4.1.3
ciscoadaptive_security_appliance_software
8.4.1.11
ciscoadaptive_security_appliance_software
8.4.2
ciscoadaptive_security_appliance_software
8.4.2.1
ciscoadaptive_security_appliance_software
8.4.2.8
ciscoadaptive_security_appliance_software
8.4.3
ciscoadaptive_security_appliance_software
8.4.3.8
ciscoadaptive_security_appliance_software
8.4.3.9
ciscoadaptive_security_appliance_software
8.4.4
ciscoadaptive_security_appliance_software
8.4.4.1
ciscoadaptive_security_appliance_software
8.4.4.3
ciscoadaptive_security_appliance_software
8.4.4.5
ciscoadaptive_security_appliance_software
8.4.4.9
ciscoadaptive_security_appliance_software
8.4.5
ciscoadaptive_security_appliance_software
8.4.5.6
ciscoadaptive_security_appliance_software
8.4.6
ciscoadaptive_security_appliance_software
8.4.7
ciscoadaptive_security_appliance_software
8.4.7.3
ciscoadaptive_security_appliance_software
8.4.7.15
ciscoadaptive_security_appliance_software
8.4.7.22
ciscoadaptive_security_appliance_software
8.4.7.23
ciscoadaptive_security_appliance_software
8.4.7.26
ciscoadaptive_security_appliance_software
8.5.1
ciscoadaptive_security_appliance_software
8.5.1.1
ciscoadaptive_security_appliance_software
8.5.1.6
ciscoadaptive_security_appliance_software
8.5.1.7
ciscoadaptive_security_appliance_software
8.5.1.14
ciscoadaptive_security_appliance_software
8.5.1.17
ciscoadaptive_security_appliance_software
8.5.1.18
ciscoadaptive_security_appliance_software
8.5.1.19
ciscoadaptive_security_appliance_software
8.5.1.21
ciscoadaptive_security_appliance_software
8.6.1
ciscoadaptive_security_appliance_software
8.6.1.1
ciscoadaptive_security_appliance_software
8.6.1.2
ciscoadaptive_security_appliance_software
8.6.1.5
ciscoadaptive_security_appliance_software
8.6.1.10
ciscoadaptive_security_appliance_software
8.6.1.12
ciscoadaptive_security_appliance_software
8.6.1.13
ciscoadaptive_security_appliance_software
8.6.1.14
ciscoadaptive_security_appliance_software
8.7.1
ciscoadaptive_security_appliance_software
8.7.1.1
ciscoadaptive_security_appliance_software
8.7.1.3
ciscoadaptive_security_appliance_software
8.7.1.4
ciscoadaptive_security_appliance_software
8.7.1.7
ciscoadaptive_security_appliance_software
8.7.1.8
ciscoadaptive_security_appliance_software
8.7.1.11
ciscoadaptive_security_appliance_software
8.7.1.13
ciscoadaptive_security_appliance_software
9.0.1
ciscoadaptive_security_appliance_software
9.0.2
ciscoadaptive_security_appliance_software
9.0.2.10
ciscoadaptive_security_appliance_software
9.0.3
ciscoadaptive_security_appliance_software
9.0.3.6
ciscoadaptive_security_appliance_software
9.0.3.8
ciscoadaptive_security_appliance_software
9.0.4
ciscoadaptive_security_appliance_software
9.0.4.1
ciscoadaptive_security_appliance_software
9.0.4.5
ciscoadaptive_security_appliance_software
9.0.4.7
ciscoadaptive_security_appliance_software
9.0.4.17
ciscoadaptive_security_appliance_software
9.0.4.20
ciscoadaptive_security_appliance_software
9.0.4.24
ciscoadaptive_security_appliance_software
9.0.4.26
ciscoadaptive_security_appliance_software
9.0.4.29
ciscoadaptive_security_appliance_software
9.1.1
ciscoadaptive_security_appliance_software
9.1.1.4
ciscoadaptive_security_appliance_software
9.1.2
ciscoadaptive_security_appliance_software
9.1.2.8
ciscoadaptive_security_appliance_software
9.1.3
ciscoadaptive_security_appliance_software
9.1.3.2
ciscoadaptive_security_appliance_software
9.1.4
ciscoadaptive_security_appliance_software
9.1.4.5
ciscoadaptive_security_appliance_software
9.1.5
ciscoadaptive_security_appliance_software
9.1.5.10
ciscoadaptive_security_appliance_software
9.1.5.12
ciscoadaptive_security_appliance_software
9.1.5.15
ciscoadaptive_security_appliance_software
9.1.5.21
ciscoadaptive_security_appliance_software
9.1.6
ciscoadaptive_security_appliance_software
9.2.1
ciscoadaptive_security_appliance_software
9.2.2
ciscoadaptive_security_appliance_software
9.2.2.4
ciscoadaptive_security_appliance_software
9.2.2.7
ciscoadaptive_security_appliance_software
9.2.2.8
ciscoadaptive_security_appliance_software
9.2.3
ciscoadaptive_security_appliance_software
9.2.3.3
ciscoadaptive_security_appliance_software
9.3.1
ciscoadaptive_security_appliance_software
9.3.1.1
ciscoadaptive_security_appliance_software
9.3.2
ciscoadaptive_security_appliance_software
9.3.2.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-asa
http://www.securitytracker.com/id/1032045
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-asa
http://www.securitytracker.com/id/1032045