cve-2024-20260
Vulnerability from cvelistv5
Published
2024-10-23 17:07
Modified
2024-10-24 17:30
Severity ?
EPSS score ?
Summary
A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual devices to run out of system memory, which could cause SSL VPN connection processing to slow down and eventually cease all together.
This vulnerability is due to a lack of proper memory management for new incoming SSL/TLS connections on the virtual platforms. An attacker could exploit this vulnerability by sending a large number of new incoming SSL/TLS connections to the targeted virtual platform. A successful exploit could allow the attacker to deplete system memory, resulting in a denial of service (DoS) condition. The memory could be reclaimed slowly if the attack traffic is stopped, but a manual reload may be required to restore operations quickly.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| ▼ | Cisco | Cisco Adaptive Security Appliance (ASA) Software |
Version: 9.12.3 Version: 9.12.1 Version: 9.8.3 Version: 9.12.2 Version: 9.8.1 Version: 9.8.2 Version: 9.8.4 Version: 9.8.2.45 Version: 9.14.1 Version: 9.12.4 Version: 9.8.2.28 Version: 9.8.2.17 Version: 9.8.2.14 Version: 9.8.2.8 Version: 9.8.2.26 Version: 9.8.2.38 Version: 9.8.2.15 Version: 9.8.2.24 Version: 9.8.2.35 Version: 9.8.2.33 Version: 9.8.2.20 Version: 9.8.4.25 Version: 9.8.3.29 Version: 9.8.4.17 Version: 9.12.2.5 Version: 9.12.2.4 Version: 9.8.4.7 Version: 9.12.1.3 Version: 9.12.3.9 Version: 9.8.4.8 Version: 9.8.4.20 Version: 9.12.2.9 Version: 9.8.3.14 Version: 9.12.2.1 Version: 9.8.3.18 Version: 9.8.3.16 Version: 9.8.4.12 Version: 9.8.3.21 Version: 9.8.4.15 Version: 9.8.4.10 Version: 9.12.3.12 Version: 9.8.3.26 Version: 9.12.3.7 Version: 9.14.1.10 Version: 9.8.4.22 Version: 9.8.1.7 Version: 9.12.1.2 Version: 9.8.3.11 Version: 9.12.3.2 Version: 9.8.4.3 Version: 9.8.1.5 Version: 9.12.4.2 Version: 9.14.1.6 Version: 9.8.3.8 Version: 9.14.1.15 Version: 9.14.1.19 Version: 9.8.4.26 Version: 9.12.4.4 Version: 9.14.1.30 Version: 9.8.4.29 Version: 9.12.4.7 Version: 9.15.1 Version: 9.14.2 Version: 9.8.4.32 Version: 9.12.4.10 Version: 9.14.2.4 Version: 9.15.1.7 Version: 9.14.2.8 Version: 9.12.4.13 Version: 9.15.1.10 Version: 9.14.2.13 Version: 9.8.4.34 Version: 9.12.4.18 Version: 9.15.1.15 Version: 9.8.4.35 Version: 9.14.2.15 Version: 9.12.4.24 Version: 9.16.1 Version: 9.15.1.16 Version: 9.8.4.39 Version: 9.14.3 Version: 9.12.4.26 Version: 9.16.1.28 Version: 9.14.3.1 Version: 9.12.4.29 Version: 9.14.3.9 Version: 9.16.2 Version: 9.12.4.30 Version: 9.16.2.3 Version: 9.8.4.40 Version: 9.14.3.11 Version: 9.15.1.17 Version: 9.12.4.35 Version: 9.8.4.41 Version: 9.15.1.1 Version: 9.14.3.13 Version: 9.16.2.7 Version: 9.12.4.37 Version: 9.14.3.15 Version: 9.17.1 Version: 9.16.2.11 Version: 9.14.3.18 Version: 9.16.2.13 Version: 9.12.4.39 Version: 9.12.4.38 Version: 9.8.4.43 Version: 9.14.4 Version: 9.16.2.14 Version: 9.17.1.7 Version: 9.12.4.40 Version: 9.15.1.21 Version: 9.16.3.3 Version: 9.16.3 Version: 9.14.4.6 Version: 9.17.1.9 Version: 9.14.4.7 Version: 9.16.3.14 Version: 9.12.4.41 Version: 9.17.1.10 Version: 9.8.4.44 Version: 9.18.1 Version: 9.14.4.12 Version: 9.12.4.47 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.17.1.11 Version: 9.12.4.48 Version: 9.14.4.13 Version: 9.18.2 Version: 9.16.3.19 Version: 9.17.1.13 Version: 9.12.4.50 Version: 9.14.4.14 Version: 9.17.1.15 Version: 9.8.4.45 Version: 9.12.4.52 Version: 9.14.4.15 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.12.4.54 Version: 9.14.4.17 Version: 9.8.4.46 Version: 9.17.1.20 Version: 9.18.2.7 Version: 9.19.1 Version: 9.16.4.9 Version: 9.12.4.55 Version: 9.18.2.8 Version: 9.14.4.22 Version: 9.16.4.14 Version: 9.8.4.48 Version: 9.18.3 Version: 9.19.1.5 Version: 9.14.4.23 Version: 9.12.4.56 Version: 9.16.4.18 Version: 9.17.1.30 Version: 9.19.1.9 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.12.4.58 Version: 9.19.1.12 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.19.1.18 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.17.1.33 Version: 9.12.4.62 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.16.4.42 Version: 9.19.1.22 Version: 9.18.4 Version: 9.18.4.5 Version: 9.19.1.24 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.19.1.27 Version: 9.12.4.65 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.19.1.28 Version: 9.17.1.39 Version: 9.12.4.67 Version: 9.14.4.24 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.19.1.31 Version: 9.18.4.29 |
||||||
|
|||||||||
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "firepower_threat_defense_software", vendor: "cisco", versions: [ { lessThanOrEqual: "6.2.3.18", status: "affected", version: "6.2.3", versionType: "custom", }, { lessThanOrEqual: "7.4.1.1", status: "affected", version: "7.4.1", versionType: "custom", }, { lessThanOrEqual: "7.3.1.2", status: "affected", version: "7.3.0", versionType: "custom", }, { lessThanOrEqual: "7.2.8.1", status: "affected", version: "7.2.0", versionType: "custom", }, { lessThanOrEqual: "7.1.0.3", status: "affected", version: "7.1.0", versionType: "custom", }, { lessThanOrEqual: "7.0.6.2", status: "affected", version: "7.0.0", versionType: "custom", }, { lessThanOrEqual: "6.7.0.3", status: "affected", version: "6.7.0", versionType: "custom", }, { lessThanOrEqual: "6.6.7.2", status: "affected", version: "6.6.0", versionType: "custom", }, { lessThanOrEqual: "6.4.0.18", status: "affected", version: "6.4.0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "adaptive_security_appliance_software", vendor: "cisco", versions: [ { lessThanOrEqual: "9.8.4.48", status: "affected", version: "9.8.1", versionType: "custom", }, { lessThanOrEqual: "9.20.2.21", status: "affected", version: "9.20.2", versionType: "custom", }, { lessThanOrEqual: "9.19.1.31", status: "affected", version: "9.19.1", versionType: "custom", }, { lessThanOrEqual: "9.18.4.29", status: "affected", version: "9.18.1", versionType: "custom", }, { lessThanOrEqual: "19.17.1.39", status: "affected", version: "9.17.1", versionType: "custom", }, { lessThanOrEqual: "9.16.4.61", status: "affected", version: "9.16.1", versionType: "custom", }, { lessThanOrEqual: "9.15.1.21", status: "affected", version: "9.15.1", versionType: "custom", }, { lessThanOrEqual: "9.14.4.24", status: "affected", version: "9.14.1", versionType: "custom", }, { lessThanOrEqual: "9.12.4.67", status: "affected", version: "9.12.1", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2024-20260", options: [ { Exploitation: "none", }, { Automatable: "yes", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2024-10-23T18:42:51.960960Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-10-24T17:30:13.136Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unknown", product: "Cisco Adaptive Security Appliance (ASA) Software", vendor: "Cisco", versions: [ { status: "affected", version: "9.12.3", }, { status: "affected", version: "9.12.1", }, { status: "affected", version: "9.8.3", }, { status: "affected", version: "9.12.2", }, { status: "affected", version: "9.8.1", }, { status: "affected", version: "9.8.2", }, { status: "affected", version: "9.8.4", }, { status: "affected", version: "9.8.2.45", }, { status: "affected", version: "9.14.1", }, { status: "affected", version: "9.12.4", }, { status: "affected", version: "9.8.2.28", }, { status: "affected", version: "9.8.2.17", }, { status: "affected", version: "9.8.2.14", }, { status: "affected", version: "9.8.2.8", }, { status: "affected", version: "9.8.2.26", }, { status: "affected", version: "9.8.2.38", }, { status: "affected", version: "9.8.2.15", }, { status: "affected", version: "9.8.2.24", }, { status: "affected", version: "9.8.2.35", }, { status: "affected", version: "9.8.2.33", }, { status: "affected", version: "9.8.2.20", }, { status: "affected", version: "9.8.4.25", }, { status: "affected", version: "9.8.3.29", }, { status: "affected", version: "9.8.4.17", }, { status: "affected", version: "9.12.2.5", }, { status: "affected", version: "9.12.2.4", }, { status: "affected", version: "9.8.4.7", }, { status: "affected", version: "9.12.1.3", }, { status: "affected", version: "9.12.3.9", }, { status: "affected", version: "9.8.4.8", }, { status: "affected", version: "9.8.4.20", }, { status: "affected", version: "9.12.2.9", }, { status: "affected", version: "9.8.3.14", }, { status: "affected", version: "9.12.2.1", }, { status: "affected", version: "9.8.3.18", }, { status: "affected", version: "9.8.3.16", }, { status: "affected", version: "9.8.4.12", }, { status: "affected", version: "9.8.3.21", }, { status: "affected", version: "9.8.4.15", }, { status: "affected", version: "9.8.4.10", }, { status: "affected", version: "9.12.3.12", }, { status: "affected", version: "9.8.3.26", }, { status: "affected", version: "9.12.3.7", }, { status: "affected", version: "9.14.1.10", }, { status: "affected", version: "9.8.4.22", }, { status: "affected", version: "9.8.1.7", }, { status: "affected", version: "9.12.1.2", }, { status: "affected", version: "9.8.3.11", }, { status: "affected", version: "9.12.3.2", }, { status: "affected", version: "9.8.4.3", }, { status: "affected", version: "9.8.1.5", }, { status: "affected", version: "9.12.4.2", }, { status: "affected", version: "9.14.1.6", }, { status: "affected", version: "9.8.3.8", }, { status: "affected", version: "9.14.1.15", }, { status: "affected", version: "9.14.1.19", }, { status: "affected", version: "9.8.4.26", }, { status: "affected", version: "9.12.4.4", }, { status: "affected", version: "9.14.1.30", }, { status: "affected", version: "9.8.4.29", }, { status: "affected", version: "9.12.4.7", }, { status: "affected", version: "9.15.1", }, { status: "affected", version: "9.14.2", }, { status: "affected", version: "9.8.4.32", }, { status: "affected", version: "9.12.4.10", }, { status: "affected", version: "9.14.2.4", }, { status: "affected", version: "9.15.1.7", }, { status: "affected", version: "9.14.2.8", }, { status: "affected", version: "9.12.4.13", }, { status: "affected", version: "9.15.1.10", }, { status: "affected", version: "9.14.2.13", }, { status: "affected", version: "9.8.4.34", }, { status: "affected", version: "9.12.4.18", }, { status: "affected", version: "9.15.1.15", }, { status: "affected", version: "9.8.4.35", }, { status: "affected", version: "9.14.2.15", }, { status: "affected", version: "9.12.4.24", }, { status: "affected", version: "9.16.1", }, { status: "affected", version: "9.15.1.16", }, { status: "affected", version: "9.8.4.39", }, { status: "affected", version: "9.14.3", }, { status: "affected", version: "9.12.4.26", }, { status: "affected", version: "9.16.1.28", }, { status: "affected", version: "9.14.3.1", }, { status: "affected", version: "9.12.4.29", }, { status: "affected", version: "9.14.3.9", }, { status: "affected", version: "9.16.2", }, { status: "affected", version: "9.12.4.30", }, { status: "affected", version: "9.16.2.3", }, { status: "affected", version: "9.8.4.40", }, { status: "affected", version: "9.14.3.11", }, { status: "affected", version: "9.15.1.17", }, { status: "affected", version: "9.12.4.35", }, { status: "affected", version: "9.8.4.41", }, { status: "affected", version: "9.15.1.1", }, { status: "affected", version: "9.14.3.13", }, { status: "affected", version: "9.16.2.7", }, { status: "affected", version: "9.12.4.37", }, { status: "affected", version: "9.14.3.15", }, { status: "affected", version: "9.17.1", }, { status: "affected", version: "9.16.2.11", }, { status: "affected", version: "9.14.3.18", }, { status: "affected", version: "9.16.2.13", }, { status: "affected", version: "9.12.4.39", }, { status: "affected", version: "9.12.4.38", }, { status: "affected", version: "9.8.4.43", }, { status: "affected", version: "9.14.4", }, { status: "affected", version: "9.16.2.14", }, { status: "affected", version: "9.17.1.7", }, { status: "affected", version: "9.12.4.40", }, { status: "affected", version: "9.15.1.21", }, { status: "affected", version: "9.16.3.3", }, { status: "affected", version: "9.16.3", }, { status: "affected", version: "9.14.4.6", }, { status: "affected", version: "9.17.1.9", }, { status: "affected", version: "9.14.4.7", }, { status: "affected", version: "9.16.3.14", }, { status: "affected", version: "9.12.4.41", }, { status: "affected", version: "9.17.1.10", }, { status: "affected", version: "9.8.4.44", }, { status: "affected", version: "9.18.1", }, { status: "affected", version: "9.14.4.12", }, { status: "affected", version: "9.12.4.47", }, { status: "affected", version: "9.16.3.15", }, { status: "affected", version: "9.18.1.3", }, { status: "affected", version: "9.17.1.11", }, { status: "affected", version: "9.12.4.48", }, { status: "affected", version: "9.14.4.13", }, { status: "affected", version: "9.18.2", }, { status: "affected", version: "9.16.3.19", }, { status: "affected", version: "9.17.1.13", }, { status: "affected", version: "9.12.4.50", }, { status: "affected", version: "9.14.4.14", }, { status: "affected", version: "9.17.1.15", }, { status: "affected", version: "9.8.4.45", }, { status: "affected", version: "9.12.4.52", }, { status: "affected", version: "9.14.4.15", }, { status: "affected", version: "9.16.3.23", }, { status: "affected", version: "9.18.2.5", }, { status: "affected", version: "9.16.4", }, { status: "affected", version: "9.12.4.54", }, { status: "affected", version: "9.14.4.17", }, { status: "affected", version: "9.8.4.46", }, { status: "affected", version: "9.17.1.20", }, { status: "affected", version: "9.18.2.7", }, { status: "affected", version: "9.19.1", }, { status: "affected", version: "9.16.4.9", }, { status: "affected", version: "9.12.4.55", }, { status: "affected", version: "9.18.2.8", }, { status: "affected", version: "9.14.4.22", }, { status: "affected", version: "9.16.4.14", }, { status: "affected", version: "9.8.4.48", }, { status: "affected", version: "9.18.3", }, { status: "affected", version: "9.19.1.5", }, { status: "affected", version: "9.14.4.23", }, { status: "affected", version: "9.12.4.56", }, { status: "affected", version: "9.16.4.18", }, { status: "affected", version: "9.17.1.30", }, { status: "affected", version: "9.19.1.9", }, { status: "affected", version: "9.18.3.39", }, { status: "affected", version: "9.16.4.19", }, { status: "affected", version: "9.12.4.58", }, { status: "affected", version: "9.19.1.12", }, { status: "affected", version: "9.18.3.46", }, { status: "affected", version: "9.16.4.27", }, { status: "affected", version: "9.19.1.18", }, { status: "affected", version: "9.18.3.53", }, { status: "affected", version: "9.18.3.55", }, { status: "affected", version: "9.16.4.38", }, { status: "affected", version: "9.17.1.33", }, { status: "affected", version: "9.12.4.62", }, { status: "affected", version: "9.16.4.39", }, { status: "affected", version: "9.18.3.56", }, { status: "affected", version: "9.16.4.42", }, { status: "affected", version: "9.19.1.22", }, { status: "affected", version: "9.18.4", }, { status: "affected", version: "9.18.4.5", }, { status: "affected", version: "9.19.1.24", }, { status: "affected", version: "9.16.4.48", }, { status: "affected", version: "9.18.4.8", }, { status: "affected", version: "9.20.2", }, { status: "affected", version: "9.19.1.27", }, { status: "affected", version: "9.12.4.65", }, { status: "affected", version: "9.16.4.55", }, { status: "affected", version: "9.18.4.22", }, { status: "affected", version: "9.20.2.10", }, { status: "affected", version: "9.16.4.57", }, { status: "affected", version: "9.19.1.28", }, { status: "affected", version: "9.17.1.39", }, { status: "affected", version: "9.12.4.67", }, { status: "affected", version: "9.14.4.24", }, { status: "affected", version: "9.18.4.24", }, { status: "affected", version: "9.20.2.21", }, { status: "affected", version: "9.16.4.61", }, { status: "affected", version: "9.19.1.31", }, { status: "affected", version: "9.18.4.29", }, ], }, { defaultStatus: "unknown", product: "Cisco Firepower Threat Defense Software", vendor: "Cisco", versions: [ { status: "affected", version: "6.2.3.7", }, { status: "affected", version: "6.4.0", }, { status: "affected", version: "6.4.0.1", }, { status: "affected", version: "6.2.3.15", }, { status: "affected", version: "6.2.3.5", }, { status: "affected", version: "6.2.3", }, { status: "affected", version: "6.2.3.4", }, { status: "affected", version: "6.2.3.10", }, { status: "affected", version: "6.4.0.4", }, { status: "affected", version: "6.4.0.6", }, { status: "affected", version: "6.4.0.5", }, { status: "affected", version: "6.2.3.13", }, { status: "affected", version: "6.2.3.2", }, { status: "affected", version: "6.4.0.2", }, { status: "affected", version: "6.2.3.14", }, { status: "affected", version: "6.2.3.8", }, { status: "affected", version: "6.2.3.3", }, { status: "affected", version: "6.2.3.1", }, { status: "affected", version: "6.2.3.12", }, { status: "affected", version: "6.2.3.11", }, { status: "affected", version: "6.2.3.6", }, { status: "affected", version: "6.4.0.3", }, { status: "affected", version: "6.2.3.9", }, { status: "affected", version: "6.4.0.8", }, { status: "affected", version: "6.4.0.7", }, { status: "affected", version: "6.6.0", }, { status: "affected", version: "6.4.0.9", }, { status: "affected", version: "6.2.3.16", }, { status: "affected", version: "6.6.0.1", }, { status: "affected", version: "6.6.1", }, { status: "affected", version: "6.4.0.10", }, { status: "affected", version: "6.7.0", }, { status: "affected", version: "6.4.0.11", }, { status: "affected", version: "6.6.3", }, { status: "affected", version: "6.7.0.1", }, { status: "affected", version: "6.6.4", }, { status: "affected", version: "6.4.0.12", }, { status: "affected", version: "6.7.0.2", }, { status: "affected", version: "7.0.0", }, { status: "affected", version: "6.2.3.17", }, { status: "affected", version: "7.0.0.1", }, { status: "affected", version: "6.6.5", }, { status: "affected", version: "7.0.1", }, { status: "affected", version: "7.1.0", }, { status: "affected", version: "6.4.0.13", }, { status: "affected", version: "6.6.5.1", }, { status: "affected", version: "6.2.3.18", }, { status: "affected", version: "7.0.1.1", }, { status: "affected", version: "6.7.0.3", }, { status: "affected", version: "6.4.0.14", }, { status: "affected", version: "7.1.0.1", }, { status: "affected", version: "6.6.5.2", }, { status: "affected", version: "7.0.2", }, { status: "affected", version: "6.4.0.15", }, { status: "affected", version: "7.2.0", }, { status: "affected", version: "7.0.2.1", }, { status: "affected", version: "7.0.3", }, { status: "affected", version: "6.6.7", }, { status: "affected", version: "7.2.0.1", }, { status: "affected", version: "7.0.4", }, { status: "affected", version: "7.2.1", }, { status: "affected", version: "7.0.5", }, { status: "affected", version: "6.4.0.16", }, { status: "affected", version: "7.3.0", }, { status: "affected", version: "7.2.2", }, { status: "affected", version: "6.6.7.1", }, { status: "affected", version: "7.2.3", }, { status: "affected", version: "7.3.1", }, { status: "affected", version: "7.1.0.3", }, { status: "affected", version: "7.2.4", }, { status: "affected", version: "7.0.6", }, { status: "affected", version: "7.2.5", }, { status: "affected", version: "7.2.4.1", }, { status: "affected", version: "7.3.1.1", }, { status: "affected", version: "6.4.0.17", }, { status: "affected", version: "7.0.6.1", }, { status: "affected", version: "7.2.5.1", }, { status: "affected", version: "7.4.1", }, { status: "affected", version: "7.2.6", }, { status: "affected", version: "7.0.6.2", }, { status: "affected", version: "7.4.1.1", }, { status: "affected", version: "6.6.7.2", }, { status: "affected", version: "6.4.0.18", }, { status: "affected", version: "7.2.7", }, { status: "affected", version: "7.2.5.2", }, { status: "affected", version: "7.3.1.2", }, { status: "affected", version: "7.2.8", }, { status: "affected", version: "7.2.8.1", }, ], }, ], descriptions: [ { lang: "en", value: "A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual devices to run out of system memory, which could cause SSL VPN connection processing to slow down and eventually cease all together.\r\n\r\nThis vulnerability is due to a lack of proper memory management for new incoming SSL/TLS connections on the virtual platforms. An attacker could exploit this vulnerability by sending a large number of new incoming SSL/TLS connections to the targeted virtual platform. A successful exploit could allow the attacker to deplete system memory, resulting in a denial of service (DoS) condition. The memory could be reclaimed slowly if the attack traffic is stopped, but a manual reload may be required to restore operations quickly.", }, ], exploits: [ { lang: "en", value: "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.6, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, format: "cvssV3_1", }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-789", description: "Uncontrolled Memory Allocation", lang: "en", type: "cwe", }, ], }, ], providerMetadata: { dateUpdated: "2024-10-23T17:07:17.073Z", orgId: "d1c1063e-7a18-46af-9102-31f8928bc633", shortName: "cisco", }, references: [ { name: "cisco-sa-asaftdvirtual-dos-MuenGnYR", url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftdvirtual-dos-MuenGnYR", }, ], source: { advisory: "cisco-sa-asaftdvirtual-dos-MuenGnYR", defects: [ "CSCwe44099", ], discovery: "INTERNAL", }, title: "Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability", }, }, cveMetadata: { assignerOrgId: "d1c1063e-7a18-46af-9102-31f8928bc633", assignerShortName: "cisco", cveId: "CVE-2024-20260", datePublished: "2024-10-23T17:07:17.073Z", dateReserved: "2023-11-08T15:08:07.623Z", dateUpdated: "2024-10-24T17:30:13.136Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2024-20260\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2024-10-23T17:15:13.950\",\"lastModified\":\"2024-10-25T12:56:36.827\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual devices to run out of system memory, which could cause SSL VPN connection processing to slow down and eventually cease all together.\\r\\n\\r\\nThis vulnerability is due to a lack of proper memory management for new incoming SSL/TLS connections on the virtual platforms. An attacker could exploit this vulnerability by sending a large number of new incoming SSL/TLS connections to the targeted virtual platform. A successful exploit could allow the attacker to deplete system memory, resulting in a denial of service (DoS) condition. The memory could be reclaimed slowly if the attack traffic is stopped, but a manual reload may be required to restore operations quickly.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en los servidores web de administración y VPN de las plataformas Cisco Adaptive Security Virtual Appliance (ASAv) y Cisco Secure Firewall Threat Defense Virtual (FTDv), anteriormente Cisco Firepower Threat Defense Virtual, podría permitir que un atacante remoto no autenticado provoque que los dispositivos virtuales se queden sin memoria del sistema, lo que podría hacer que el procesamiento de la conexión SSL VPN se ralentice y, finalmente, cese por completo. Esta vulnerabilidad se debe a la falta de una administración de memoria adecuada para las nuevas conexiones SSL/TLS entrantes en las plataformas virtuales. Un atacante podría explotar esta vulnerabilidad enviando una gran cantidad de nuevas conexiones SSL/TLS entrantes a la plataforma virtual de destino. Una explotación exitosa podría permitir al atacante agotar la memoria del sistema, lo que daría como resultado una condición de denegación de servicio (DoS). La memoria podría recuperarse lentamente si se detiene el tráfico del ataque, pero puede ser necesaria una recarga manual para restaurar las operaciones rápidamente.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":4.0}]},\"weaknesses\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-789\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftdvirtual-dos-MuenGnYR\",\"source\":\"ykramarz@cisco.com\"}]}}", vulnrichment: { containers: "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-20260\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-23T18:42:51.960960Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*\"], \"vendor\": \"cisco\", \"product\": \"firepower_threat_defense_software\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.3\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"6.2.3.18\"}, {\"status\": \"affected\", \"version\": \"7.4.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"7.4.1.1\"}, {\"status\": \"affected\", \"version\": \"7.3.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"7.3.1.2\"}, {\"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"7.2.8.1\"}, {\"status\": \"affected\", \"version\": \"7.1.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"7.1.0.3\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"7.0.6.2\"}, {\"status\": \"affected\", \"version\": \"6.7.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"6.7.0.3\"}, {\"status\": \"affected\", \"version\": \"6.6.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"6.6.7.2\"}, {\"status\": \"affected\", \"version\": \"6.4.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"6.4.0.18\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*\"], \"vendor\": \"cisco\", \"product\": \"adaptive_security_appliance_software\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.8.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.8.4.48\"}, {\"status\": \"affected\", \"version\": \"9.20.2\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.20.2.21\"}, {\"status\": \"affected\", \"version\": \"9.19.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.19.1.31\"}, {\"status\": \"affected\", \"version\": \"9.18.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.18.4.29\"}, {\"status\": \"affected\", \"version\": \"9.17.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"19.17.1.39\"}, {\"status\": \"affected\", \"version\": \"9.16.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.16.4.61\"}, {\"status\": \"affected\", \"version\": \"9.15.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.15.1.21\"}, {\"status\": \"affected\", \"version\": \"9.14.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.14.4.24\"}, {\"status\": \"affected\", \"version\": \"9.12.1\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"9.12.4.67\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-23T19:22:20.171Z\"}}], \"cna\": {\"title\": \"Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability\", \"source\": {\"defects\": [\"CSCwe44099\"], \"advisory\": \"cisco-sa-asaftdvirtual-dos-MuenGnYR\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.6, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Adaptive Security Appliance (ASA) Software\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.12.3\"}, {\"status\": \"affected\", \"version\": \"9.12.1\"}, {\"status\": \"affected\", \"version\": \"9.8.3\"}, {\"status\": \"affected\", \"version\": \"9.12.2\"}, {\"status\": \"affected\", \"version\": \"9.8.1\"}, {\"status\": \"affected\", \"version\": \"9.8.2\"}, {\"status\": \"affected\", \"version\": \"9.8.4\"}, {\"status\": \"affected\", \"version\": \"9.8.2.45\"}, {\"status\": \"affected\", \"version\": \"9.14.1\"}, {\"status\": \"affected\", \"version\": \"9.12.4\"}, {\"status\": \"affected\", \"version\": \"9.8.2.28\"}, {\"status\": \"affected\", \"version\": \"9.8.2.17\"}, {\"status\": \"affected\", \"version\": \"9.8.2.14\"}, {\"status\": \"affected\", \"version\": \"9.8.2.8\"}, {\"status\": \"affected\", \"version\": \"9.8.2.26\"}, {\"status\": \"affected\", \"version\": \"9.8.2.38\"}, {\"status\": \"affected\", \"version\": \"9.8.2.15\"}, {\"status\": \"affected\", \"version\": \"9.8.2.24\"}, {\"status\": \"affected\", \"version\": \"9.8.2.35\"}, {\"status\": \"affected\", \"version\": \"9.8.2.33\"}, {\"status\": \"affected\", \"version\": \"9.8.2.20\"}, {\"status\": \"affected\", \"version\": \"9.8.4.25\"}, {\"status\": \"affected\", \"version\": \"9.8.3.29\"}, {\"status\": \"affected\", \"version\": \"9.8.4.17\"}, {\"status\": \"affected\", \"version\": \"9.12.2.5\"}, {\"status\": \"affected\", \"version\": \"9.12.2.4\"}, {\"status\": \"affected\", \"version\": \"9.8.4.7\"}, {\"status\": \"affected\", \"version\": \"9.12.1.3\"}, {\"status\": \"affected\", \"version\": \"9.12.3.9\"}, {\"status\": \"affected\", \"version\": \"9.8.4.8\"}, {\"status\": \"affected\", \"version\": \"9.8.4.20\"}, {\"status\": \"affected\", \"version\": \"9.12.2.9\"}, {\"status\": \"affected\", \"version\": \"9.8.3.14\"}, {\"status\": \"affected\", \"version\": \"9.12.2.1\"}, {\"status\": \"affected\", \"version\": \"9.8.3.18\"}, {\"status\": \"affected\", \"version\": \"9.8.3.16\"}, {\"status\": \"affected\", \"version\": \"9.8.4.12\"}, {\"status\": \"affected\", \"version\": \"9.8.3.21\"}, {\"status\": \"affected\", \"version\": \"9.8.4.15\"}, {\"status\": \"affected\", \"version\": \"9.8.4.10\"}, {\"status\": \"affected\", \"version\": \"9.12.3.12\"}, {\"status\": \"affected\", \"version\": \"9.8.3.26\"}, {\"status\": \"affected\", \"version\": \"9.12.3.7\"}, {\"status\": \"affected\", \"version\": \"9.14.1.10\"}, {\"status\": \"affected\", \"version\": \"9.8.4.22\"}, {\"status\": \"affected\", \"version\": \"9.8.1.7\"}, {\"status\": \"affected\", \"version\": \"9.12.1.2\"}, {\"status\": \"affected\", \"version\": \"9.8.3.11\"}, {\"status\": \"affected\", \"version\": \"9.12.3.2\"}, {\"status\": \"affected\", \"version\": \"9.8.4.3\"}, {\"status\": \"affected\", \"version\": \"9.8.1.5\"}, {\"status\": \"affected\", \"version\": \"9.12.4.2\"}, {\"status\": \"affected\", \"version\": \"9.14.1.6\"}, {\"status\": \"affected\", \"version\": \"9.8.3.8\"}, {\"status\": \"affected\", \"version\": \"9.14.1.15\"}, {\"status\": \"affected\", \"version\": \"9.14.1.19\"}, {\"status\": \"affected\", \"version\": \"9.8.4.26\"}, {\"status\": \"affected\", \"version\": \"9.12.4.4\"}, {\"status\": \"affected\", \"version\": \"9.14.1.30\"}, {\"status\": \"affected\", \"version\": \"9.8.4.29\"}, {\"status\": \"affected\", \"version\": \"9.12.4.7\"}, {\"status\": \"affected\", \"version\": \"9.15.1\"}, {\"status\": \"affected\", \"version\": \"9.14.2\"}, {\"status\": \"affected\", \"version\": \"9.8.4.32\"}, {\"status\": \"affected\", \"version\": \"9.12.4.10\"}, {\"status\": \"affected\", \"version\": \"9.14.2.4\"}, {\"status\": \"affected\", \"version\": \"9.15.1.7\"}, {\"status\": \"affected\", \"version\": \"9.14.2.8\"}, {\"status\": \"affected\", \"version\": \"9.12.4.13\"}, {\"status\": \"affected\", \"version\": \"9.15.1.10\"}, {\"status\": \"affected\", \"version\": \"9.14.2.13\"}, {\"status\": \"affected\", \"version\": \"9.8.4.34\"}, {\"status\": \"affected\", \"version\": \"9.12.4.18\"}, {\"status\": \"affected\", \"version\": \"9.15.1.15\"}, {\"status\": \"affected\", \"version\": \"9.8.4.35\"}, {\"status\": \"affected\", \"version\": \"9.14.2.15\"}, {\"status\": \"affected\", \"version\": \"9.12.4.24\"}, {\"status\": \"affected\", \"version\": \"9.16.1\"}, {\"status\": \"affected\", \"version\": \"9.15.1.16\"}, {\"status\": \"affected\", \"version\": \"9.8.4.39\"}, {\"status\": \"affected\", \"version\": \"9.14.3\"}, {\"status\": \"affected\", \"version\": \"9.12.4.26\"}, {\"status\": \"affected\", \"version\": \"9.16.1.28\"}, {\"status\": \"affected\", \"version\": \"9.14.3.1\"}, {\"status\": \"affected\", \"version\": \"9.12.4.29\"}, {\"status\": \"affected\", \"version\": \"9.14.3.9\"}, {\"status\": \"affected\", \"version\": \"9.16.2\"}, {\"status\": \"affected\", \"version\": \"9.12.4.30\"}, {\"status\": \"affected\", \"version\": \"9.16.2.3\"}, {\"status\": \"affected\", \"version\": \"9.8.4.40\"}, {\"status\": \"affected\", \"version\": \"9.14.3.11\"}, {\"status\": \"affected\", \"version\": \"9.15.1.17\"}, {\"status\": \"affected\", \"version\": \"9.12.4.35\"}, {\"status\": \"affected\", \"version\": \"9.8.4.41\"}, {\"status\": \"affected\", \"version\": \"9.15.1.1\"}, {\"status\": \"affected\", \"version\": \"9.14.3.13\"}, {\"status\": \"affected\", \"version\": \"9.16.2.7\"}, {\"status\": \"affected\", \"version\": \"9.12.4.37\"}, {\"status\": \"affected\", \"version\": \"9.14.3.15\"}, {\"status\": \"affected\", \"version\": \"9.17.1\"}, {\"status\": \"affected\", \"version\": \"9.16.2.11\"}, {\"status\": \"affected\", \"version\": \"9.14.3.18\"}, {\"status\": \"affected\", \"version\": \"9.16.2.13\"}, {\"status\": \"affected\", \"version\": \"9.12.4.39\"}, {\"status\": \"affected\", \"version\": \"9.12.4.38\"}, {\"status\": \"affected\", \"version\": \"9.8.4.43\"}, {\"status\": \"affected\", \"version\": \"9.14.4\"}, {\"status\": \"affected\", \"version\": \"9.16.2.14\"}, {\"status\": \"affected\", \"version\": \"9.17.1.7\"}, {\"status\": \"affected\", \"version\": \"9.12.4.40\"}, {\"status\": \"affected\", \"version\": \"9.15.1.21\"}, {\"status\": \"affected\", \"version\": \"9.16.3.3\"}, {\"status\": \"affected\", \"version\": \"9.16.3\"}, {\"status\": \"affected\", \"version\": \"9.14.4.6\"}, {\"status\": \"affected\", \"version\": \"9.17.1.9\"}, {\"status\": \"affected\", \"version\": \"9.14.4.7\"}, {\"status\": \"affected\", \"version\": \"9.16.3.14\"}, {\"status\": \"affected\", \"version\": \"9.12.4.41\"}, {\"status\": \"affected\", \"version\": \"9.17.1.10\"}, {\"status\": \"affected\", \"version\": \"9.8.4.44\"}, {\"status\": \"affected\", \"version\": \"9.18.1\"}, {\"status\": \"affected\", \"version\": \"9.14.4.12\"}, {\"status\": \"affected\", \"version\": \"9.12.4.47\"}, {\"status\": \"affected\", \"version\": \"9.16.3.15\"}, {\"status\": \"affected\", \"version\": \"9.18.1.3\"}, {\"status\": \"affected\", \"version\": \"9.17.1.11\"}, {\"status\": \"affected\", \"version\": \"9.12.4.48\"}, {\"status\": \"affected\", \"version\": \"9.14.4.13\"}, {\"status\": \"affected\", \"version\": \"9.18.2\"}, {\"status\": \"affected\", \"version\": \"9.16.3.19\"}, {\"status\": \"affected\", \"version\": \"9.17.1.13\"}, {\"status\": \"affected\", \"version\": \"9.12.4.50\"}, {\"status\": \"affected\", \"version\": \"9.14.4.14\"}, {\"status\": \"affected\", \"version\": \"9.17.1.15\"}, {\"status\": \"affected\", \"version\": \"9.8.4.45\"}, {\"status\": \"affected\", \"version\": \"9.12.4.52\"}, {\"status\": \"affected\", \"version\": \"9.14.4.15\"}, {\"status\": \"affected\", \"version\": \"9.16.3.23\"}, {\"status\": \"affected\", \"version\": \"9.18.2.5\"}, {\"status\": \"affected\", \"version\": \"9.16.4\"}, {\"status\": \"affected\", \"version\": \"9.12.4.54\"}, {\"status\": \"affected\", \"version\": \"9.14.4.17\"}, {\"status\": \"affected\", \"version\": \"9.8.4.46\"}, {\"status\": \"affected\", \"version\": \"9.17.1.20\"}, {\"status\": \"affected\", \"version\": \"9.18.2.7\"}, {\"status\": \"affected\", \"version\": \"9.19.1\"}, {\"status\": \"affected\", \"version\": \"9.16.4.9\"}, {\"status\": \"affected\", \"version\": \"9.12.4.55\"}, {\"status\": \"affected\", \"version\": \"9.18.2.8\"}, {\"status\": \"affected\", \"version\": \"9.14.4.22\"}, {\"status\": \"affected\", \"version\": \"9.16.4.14\"}, {\"status\": \"affected\", \"version\": \"9.8.4.48\"}, {\"status\": \"affected\", \"version\": \"9.18.3\"}, {\"status\": \"affected\", \"version\": \"9.19.1.5\"}, {\"status\": \"affected\", \"version\": \"9.14.4.23\"}, {\"status\": \"affected\", \"version\": \"9.12.4.56\"}, {\"status\": \"affected\", \"version\": \"9.16.4.18\"}, {\"status\": \"affected\", \"version\": \"9.17.1.30\"}, {\"status\": \"affected\", \"version\": \"9.19.1.9\"}, {\"status\": \"affected\", \"version\": \"9.18.3.39\"}, {\"status\": \"affected\", \"version\": \"9.16.4.19\"}, {\"status\": \"affected\", \"version\": \"9.12.4.58\"}, {\"status\": \"affected\", \"version\": \"9.19.1.12\"}, {\"status\": \"affected\", \"version\": \"9.18.3.46\"}, {\"status\": \"affected\", \"version\": \"9.16.4.27\"}, {\"status\": \"affected\", \"version\": \"9.19.1.18\"}, {\"status\": \"affected\", \"version\": \"9.18.3.53\"}, {\"status\": \"affected\", \"version\": \"9.18.3.55\"}, {\"status\": \"affected\", \"version\": \"9.16.4.38\"}, {\"status\": \"affected\", \"version\": \"9.17.1.33\"}, {\"status\": \"affected\", \"version\": \"9.12.4.62\"}, {\"status\": \"affected\", \"version\": \"9.16.4.39\"}, {\"status\": \"affected\", \"version\": \"9.18.3.56\"}, {\"status\": \"affected\", \"version\": \"9.16.4.42\"}, {\"status\": \"affected\", \"version\": \"9.19.1.22\"}, {\"status\": \"affected\", \"version\": \"9.18.4\"}, {\"status\": \"affected\", \"version\": \"9.18.4.5\"}, {\"status\": \"affected\", \"version\": \"9.19.1.24\"}, {\"status\": \"affected\", \"version\": \"9.16.4.48\"}, {\"status\": \"affected\", \"version\": \"9.18.4.8\"}, {\"status\": \"affected\", \"version\": \"9.20.2\"}, {\"status\": \"affected\", \"version\": \"9.19.1.27\"}, {\"status\": \"affected\", \"version\": \"9.12.4.65\"}, {\"status\": \"affected\", \"version\": \"9.16.4.55\"}, {\"status\": \"affected\", \"version\": \"9.18.4.22\"}, {\"status\": \"affected\", \"version\": \"9.20.2.10\"}, {\"status\": \"affected\", \"version\": \"9.16.4.57\"}, {\"status\": \"affected\", \"version\": \"9.19.1.28\"}, {\"status\": \"affected\", \"version\": \"9.17.1.39\"}, {\"status\": \"affected\", \"version\": \"9.12.4.67\"}, {\"status\": \"affected\", \"version\": \"9.14.4.24\"}, {\"status\": \"affected\", \"version\": \"9.18.4.24\"}, {\"status\": \"affected\", \"version\": \"9.20.2.21\"}, {\"status\": \"affected\", \"version\": \"9.16.4.61\"}, {\"status\": \"affected\", \"version\": \"9.19.1.31\"}, {\"status\": \"affected\", \"version\": \"9.18.4.29\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Cisco\", \"product\": \"Cisco Firepower Threat Defense Software\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.3.7\"}, {\"status\": \"affected\", \"version\": \"6.4.0\"}, {\"status\": \"affected\", \"version\": \"6.4.0.1\"}, {\"status\": \"affected\", \"version\": \"6.2.3.15\"}, {\"status\": \"affected\", \"version\": \"6.2.3.5\"}, {\"status\": \"affected\", \"version\": \"6.2.3\"}, {\"status\": \"affected\", \"version\": \"6.2.3.4\"}, {\"status\": \"affected\", \"version\": \"6.2.3.10\"}, {\"status\": \"affected\", \"version\": \"6.4.0.4\"}, {\"status\": \"affected\", \"version\": \"6.4.0.6\"}, {\"status\": \"affected\", \"version\": \"6.4.0.5\"}, {\"status\": \"affected\", \"version\": \"6.2.3.13\"}, {\"status\": \"affected\", \"version\": \"6.2.3.2\"}, {\"status\": \"affected\", \"version\": \"6.4.0.2\"}, {\"status\": \"affected\", \"version\": \"6.2.3.14\"}, {\"status\": \"affected\", \"version\": \"6.2.3.8\"}, {\"status\": \"affected\", \"version\": \"6.2.3.3\"}, {\"status\": \"affected\", \"version\": \"6.2.3.1\"}, {\"status\": \"affected\", \"version\": \"6.2.3.12\"}, {\"status\": \"affected\", \"version\": \"6.2.3.11\"}, {\"status\": \"affected\", \"version\": \"6.2.3.6\"}, {\"status\": \"affected\", \"version\": \"6.4.0.3\"}, {\"status\": \"affected\", \"version\": \"6.2.3.9\"}, {\"status\": \"affected\", \"version\": \"6.4.0.8\"}, {\"status\": \"affected\", \"version\": \"6.4.0.7\"}, {\"status\": \"affected\", \"version\": \"6.6.0\"}, {\"status\": \"affected\", \"version\": \"6.4.0.9\"}, {\"status\": \"affected\", \"version\": \"6.2.3.16\"}, {\"status\": \"affected\", \"version\": \"6.6.0.1\"}, {\"status\": \"affected\", \"version\": \"6.6.1\"}, {\"status\": \"affected\", \"version\": \"6.4.0.10\"}, {\"status\": \"affected\", \"version\": \"6.7.0\"}, {\"status\": \"affected\", \"version\": \"6.4.0.11\"}, {\"status\": \"affected\", \"version\": \"6.6.3\"}, {\"status\": \"affected\", \"version\": \"6.7.0.1\"}, {\"status\": \"affected\", \"version\": \"6.6.4\"}, {\"status\": \"affected\", \"version\": \"6.4.0.12\"}, {\"status\": \"affected\", \"version\": \"6.7.0.2\"}, {\"status\": \"affected\", \"version\": \"7.0.0\"}, {\"status\": \"affected\", \"version\": \"6.2.3.17\"}, {\"status\": \"affected\", \"version\": \"7.0.0.1\"}, {\"status\": \"affected\", \"version\": \"6.6.5\"}, {\"status\": \"affected\", \"version\": \"7.0.1\"}, {\"status\": \"affected\", \"version\": \"7.1.0\"}, {\"status\": \"affected\", \"version\": \"6.4.0.13\"}, {\"status\": \"affected\", \"version\": \"6.6.5.1\"}, {\"status\": \"affected\", \"version\": \"6.2.3.18\"}, {\"status\": \"affected\", \"version\": \"7.0.1.1\"}, {\"status\": \"affected\", \"version\": \"6.7.0.3\"}, {\"status\": \"affected\", \"version\": \"6.4.0.14\"}, {\"status\": \"affected\", \"version\": \"7.1.0.1\"}, {\"status\": \"affected\", \"version\": \"6.6.5.2\"}, {\"status\": \"affected\", \"version\": \"7.0.2\"}, {\"status\": \"affected\", \"version\": \"6.4.0.15\"}, {\"status\": \"affected\", \"version\": \"7.2.0\"}, {\"status\": \"affected\", \"version\": \"7.0.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.3\"}, {\"status\": \"affected\", \"version\": \"6.6.7\"}, {\"status\": \"affected\", \"version\": \"7.2.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.4\"}, {\"status\": \"affected\", \"version\": \"7.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"6.4.0.16\"}, {\"status\": \"affected\", \"version\": \"7.3.0\"}, {\"status\": \"affected\", \"version\": \"7.2.2\"}, {\"status\": \"affected\", \"version\": \"6.6.7.1\"}, {\"status\": \"affected\", \"version\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.3.1\"}, {\"status\": \"affected\", \"version\": \"7.1.0.3\"}, {\"status\": \"affected\", \"version\": \"7.2.4\"}, {\"status\": \"affected\", \"version\": \"7.0.6\"}, {\"status\": \"affected\", \"version\": \"7.2.5\"}, {\"status\": \"affected\", \"version\": \"7.2.4.1\"}, {\"status\": \"affected\", \"version\": \"7.3.1.1\"}, {\"status\": \"affected\", \"version\": \"6.4.0.17\"}, {\"status\": \"affected\", \"version\": \"7.0.6.1\"}, {\"status\": \"affected\", \"version\": \"7.2.5.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1\"}, {\"status\": \"affected\", \"version\": \"7.2.6\"}, {\"status\": \"affected\", \"version\": \"7.0.6.2\"}, {\"status\": \"affected\", \"version\": \"7.4.1.1\"}, {\"status\": \"affected\", \"version\": \"6.6.7.2\"}, {\"status\": \"affected\", \"version\": \"6.4.0.18\"}, {\"status\": \"affected\", \"version\": \"7.2.7\"}, {\"status\": \"affected\", \"version\": \"7.2.5.2\"}, {\"status\": \"affected\", \"version\": \"7.3.1.2\"}, {\"status\": \"affected\", \"version\": \"7.2.8\"}, {\"status\": \"affected\", \"version\": \"7.2.8.1\"}], \"defaultStatus\": \"unknown\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftdvirtual-dos-MuenGnYR\", \"name\": \"cisco-sa-asaftdvirtual-dos-MuenGnYR\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual devices to run out of system memory, which could cause SSL VPN connection processing to slow down and eventually cease all together.\\r\\n\\r\\nThis vulnerability is due to a lack of proper memory management for new incoming SSL/TLS connections on the virtual platforms. An attacker could exploit this vulnerability by sending a large number of new incoming SSL/TLS connections to the targeted virtual platform. A successful exploit could allow the attacker to deplete system memory, resulting in a denial of service (DoS) condition. The memory could be reclaimed slowly if the attack traffic is stopped, but a manual reload may be required to restore operations quickly.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-789\", \"description\": \"Uncontrolled Memory Allocation\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2024-10-23T17:07:17.073Z\"}}}", cveMetadata: "{\"cveId\": \"CVE-2024-20260\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-24T17:30:13.136Z\", \"dateReserved\": \"2023-11-08T15:08:07.623Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2024-10-23T17:07:17.073Z\", \"assignerShortName\": \"cisco\"}", dataType: "CVE_RECORD", dataVersion: "5.1", }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.