Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by triggering a large number of stale connections that result in an incorrect value for an MPF connection count, aka Bug ID CSCtv19854.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Adaptive_security_appliance_software | Cisco | 8.0 (including) | 8.0 (including) |
| Adaptive_security_appliance_software | Cisco | 8.0(2) (including) | 8.0(2) (including) |
| Adaptive_security_appliance_software | Cisco | 8.0(3) (including) | 8.0(3) (including) |
| Adaptive_security_appliance_software | Cisco | 8.0(4) (including) | 8.0(4) (including) |
| Adaptive_security_appliance_software | Cisco | 8.0(5) (including) | 8.0(5) (including) |
| Adaptive_security_appliance_software | Cisco | 8.0.2 (including) | 8.0.2 (including) |
| Adaptive_security_appliance_software | Cisco | 8.0.3 (including) | 8.0.3 (including) |
| Adaptive_security_appliance_software | Cisco | 8.0.4 (including) | 8.0.4 (including) |
| Adaptive_security_appliance_software | Cisco | 8.0.5 (including) | 8.0.5 (including) |
| Adaptive_security_appliance_software | Cisco | 8.1 (including) | 8.1 (including) |
| Adaptive_security_appliance_software | Cisco | 8.2(1) (including) | 8.2(1) (including) |
| Adaptive_security_appliance_software | Cisco | 8.2(2) (including) | 8.2(2) (including) |
| Adaptive_security_appliance_software | Cisco | 8.2(3) (including) | 8.2(3) (including) |
| Adaptive_security_appliance_software | Cisco | 8.2(3.9) (including) | 8.2(3.9) (including) |
| Adaptive_security_appliance_software | Cisco | 8.2(4) (including) | 8.2(4) (including) |
| Adaptive_security_appliance_software | Cisco | 8.2(4.1) (including) | 8.2(4.1) (including) |
| Adaptive_security_appliance_software | Cisco | 8.2(4.4) (including) | 8.2(4.4) (including) |
| Adaptive_security_appliance_software | Cisco | 8.2(5) (including) | 8.2(5) (including) |
| Adaptive_security_appliance_software | Cisco | 8.2.1 (including) | 8.2.1 (including) |
| Adaptive_security_appliance_software | Cisco | 8.2.2 (including) | 8.2.2 (including) |
| Adaptive_security_appliance_software | Cisco | 8.2.2-interim (including) | 8.2.2-interim (including) |
| Adaptive_security_appliance_software | Cisco | 8.2.3 (including) | 8.2.3 (including) |
| Adaptive_security_appliance_software | Cisco | 8.3(1) (including) | 8.3(1) (including) |
| Adaptive_security_appliance_software | Cisco | 8.3(2) (including) | 8.3(2) (including) |
| Adaptive_security_appliance_software | Cisco | 8.3.1 (including) | 8.3.1 (including) |
| Adaptive_security_appliance_software | Cisco | 8.3.1-interim (including) | 8.3.1-interim (including) |
| Adaptive_security_appliance_software | Cisco | 8.3.2 (including) | 8.3.2 (including) |
| Adaptive_security_appliance_software | Cisco | 8.4 (including) | 8.4 (including) |
| Adaptive_security_appliance_software | Cisco | 8.4(1) (including) | 8.4(1) (including) |
| Adaptive_security_appliance_software | Cisco | 8.4(1.11) (including) | 8.4(1.11) (including) |
| Adaptive_security_appliance_software | Cisco | 8.4(2) (including) | 8.4(2) (including) |
| Adaptive_security_appliance_software | Cisco | 8.4(2.11) (including) | 8.4(2.11) (including) |