漏洞标题
N/A
漏洞描述信息
Cisco自适应安全终端(ASA)软件和Cisco火力威胁防御(FTD)软件的SSL/TLS客户端的一个漏洞可能导致已验证的远程攻击者在一个受影响的设备上引发拒绝服务(DoS)条件。此漏洞是由于设备在启动SSL/TLS连接时 improper memory management导致的。攻击者可以通过确保设备将连接到使用特定加密参数的SSL/TLS服务器来利用此漏洞。成功的利用可能导致攻击者导致受影响设备意外重新加载，从而引发DoS条件。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this vulnerability by ensuring that the device will connect to an SSL/TLS server that is using specific encryption parameters. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
漏洞类别
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
漏洞标题
Cisco Firepower Threat Defense和Cisco Adaptive Security Appliances Software 缓冲区错误漏洞
漏洞描述信息
Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software）都是美国思科（Cisco）公司的产品。Cisco Firepower Threat Defense是一套提供下一代防火墙服务的统一软件。Cisco Adaptive Security Appliances Software是一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。 Cisco Adap
CVSS信息
N/A
漏洞类别
缓冲区错误