CVE-2014-3407

EPSS 0.38%
Veröffentlicht 28.11.2014 02:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
Teams Watchlist Login
Unerledigt Login

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCuq68888.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Adaptive Security Appliance Software Version <= 9.3\(2\)

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.38%	0.565

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3407

Vendor Advisory

Broken Link

http://tools.cisco.com/security/center/viewAlert.x?alertId=36542

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-3407

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3407

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3407

EUVD