cnvd-2017-07138
Vulnerability from cnvd
Title
Cisco ASA Software拒绝服务漏洞
Description
Cisco ASA 1000V Cloud Firewall等都是美国思科（Cisco）公司的产品。Cisco ASA 1000V Cloud Firewall是一套云防火墙解决方案。Cisco ASA 5500 Series Adaptive Security Appliances是下一代防火墙安全设备。Cisco ASA（Adaptive Security Appliances，自适应安全设备）Software是其中的一套防火墙和网络安全平台。 多款Cisco产品中的Cisco ASA Software的Secure Sockets Layer(SSL)和Transport Layer Security (TLS)代码存在拒绝服务漏洞，由于程序未能正确的解析特制的SSL或TLS数据包。远程攻击者可通过向受影响的系统发送特制的数据包利用该漏洞造成受影响系统重载。
Severity
高
Patch Name
Cisco ASA Software拒绝服务漏洞的补丁
Patch Description
Cisco ASA 1000V Cloud Firewall等都是美国思科（Cisco）公司的产品。Cisco ASA 1000V Cloud Firewall是一套云防火墙解决方案。Cisco ASA 5500 Series Adaptive Security Appliances是下一代防火墙安全设备。Cisco ASA（Adaptive Security Appliances，自适应安全设备）Software是其中的一套防火墙和网络安全平台。 多款Cisco产品中的Cisco ASA Software的Secure Sockets Layer(SSL)和Transport Layer Security (TLS)代码存在拒绝服务漏洞，由于程序未能正确的解析特制的SSL或TLS数据包。远程攻击者可通过向受影响的系统发送特制的数据包利用该漏洞造成受影响系统重载。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

用户可参考如下厂商提供的安全补丁以修复该漏洞： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-tls

Reference
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-tls https://nvd.nist.gov/vuln/detail/CVE-2017-6608 http://www.securityfocus.com/bid/97937
Impacted products
Name
['Cisco 7600 Series Routers', 'Cisco ASA 5500-X Series Next-Generation Firewalls', 'Cisco Adaptive Security Virtual Appliance (ASAv)', 'Cisco Firepower 9300 ASA Security Module', 'Cisco ISA 3000 Industrial Security Appliance', 'Cisco ASA 1000V Cloud Firewall', 'Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches', 'Cisco ASA 5500 Series Adaptive Security Appliances']
Show details on source website

To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "97937"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-6608"
    }
  },
  "description": "Cisco ASA 1000V Cloud Firewall\u7b49\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco ASA 1000V Cloud Firewall\u662f\u4e00\u5957\u4e91\u9632\u706b\u5899\u89e3\u51b3\u65b9\u6848\u3002Cisco ASA 5500 Series Adaptive Security Appliances\u662f\u4e0b\u4e00\u4ee3\u9632\u706b\u5899\u5b89\u5168\u8bbe\u5907\u3002Cisco ASA\uff08Adaptive Security Appliances\uff0c\u81ea\u9002\u5e94\u5b89\u5168\u8bbe\u5907\uff09Software\u662f\u5176\u4e2d\u7684\u4e00\u5957\u9632\u706b\u5899\u548c\u7f51\u7edc\u5b89\u5168\u5e73\u53f0\u3002\r\n\r\n\u591a\u6b3eCisco\u4ea7\u54c1\u4e2d\u7684Cisco ASA Software\u7684Secure Sockets Layer(SSL)\u548cTransport Layer Security (TLS)\u4ee3\u7801\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u89e3\u6790\u7279\u5236\u7684SSL\u6216TLS\u6570\u636e\u5305\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u53d1\u9001\u7279\u5236\u7684\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u53d7\u5f71\u54cd\u7cfb\u7edf\u91cd\u8f7d\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-tls",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-07138",
  "openTime": "2017-05-22",
  "patchDescription": "Cisco ASA 1000V Cloud Firewall\u7b49\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco ASA 1000V Cloud Firewall\u662f\u4e00\u5957\u4e91\u9632\u706b\u5899\u89e3\u51b3\u65b9\u6848\u3002Cisco ASA 5500 Series Adaptive Security Appliances\u662f\u4e0b\u4e00\u4ee3\u9632\u706b\u5899\u5b89\u5168\u8bbe\u5907\u3002Cisco ASA\uff08Adaptive Security Appliances\uff0c\u81ea\u9002\u5e94\u5b89\u5168\u8bbe\u5907\uff09Software\u662f\u5176\u4e2d\u7684\u4e00\u5957\u9632\u706b\u5899\u548c\u7f51\u7edc\u5b89\u5168\u5e73\u53f0\u3002\r\n\r\n\u591a\u6b3eCisco\u4ea7\u54c1\u4e2d\u7684Cisco ASA Software\u7684Secure Sockets Layer(SSL)\u548cTransport Layer Security (TLS)\u4ee3\u7801\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u89e3\u6790\u7279\u5236\u7684SSL\u6216TLS\u6570\u636e\u5305\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u53d1\u9001\u7279\u5236\u7684\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u53d7\u5f71\u54cd\u7cfb\u7edf\u91cd\u8f7d\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco ASA Software\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco 7600 Series Routers",
      "Cisco ASA 5500-X Series Next-Generation Firewalls",
      "Cisco Adaptive Security Virtual Appliance (ASAv)",
      "Cisco Firepower 9300 ASA Security Module",
      "Cisco ISA 3000 Industrial Security Appliance",
      "Cisco ASA 1000V Cloud Firewall",
      "Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches",
      "Cisco ASA 5500 Series Adaptive Security Appliances"
    ]
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-tls\r\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-6608\r\nhttp://www.securityfocus.com/bid/97937",
  "serverity": "\u9ad8",
  "submitTime": "2017-04-27",
  "title": "Cisco ASA Software\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.