The Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module for Cisco ASA with FirePOWER Services 5.3.1 through 6.0.0 misconfigures kernel logging, which allows remote attackers to cause a denial of service (resource consumption, and inspection outage or module outage) via a flood of crafted IP traffic, aka Bug ID CSCux19922.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Asa_with_firepower_services | Cisco | 5.3.1 (including) | 5.3.1 (including) |
| Asa_with_firepower_services | Cisco | 5.3.1.1 (including) | 5.3.1.1 (including) |
| Asa_with_firepower_services | Cisco | 5.4.0 (including) | 5.4.0 (including) |
| Asa_with_firepower_services | Cisco | 5.4.0.1 (including) | 5.4.0.1 (including) |
| Asa_with_firepower_services | Cisco | 5.4.0.2 (including) | 5.4.0.2 (including) |
| Asa_with_firepower_services | Cisco | 5.4.0.3 (including) | 5.4.0.3 (including) |
| Asa_with_firepower_services | Cisco | 5.4.0.4 (including) | 5.4.0.4 (including) |
| Asa_with_firepower_services | Cisco | 5.4.0.5 (including) | 5.4.0.5 (including) |
| Asa_with_firepower_services | Cisco | 5.4.0.6 (including) | 5.4.0.6 (including) |
| Asa_with_firepower_services | Cisco | 5.4.1 (including) | 5.4.1 (including) |
| Asa_with_firepower_services | Cisco | 5.4.1.1 (including) | 5.4.1.1 (including) |
| Asa_with_firepower_services | Cisco | 5.4.1.2 (including) | 5.4.1.2 (including) |
| Asa_with_firepower_services | Cisco | 5.4.1.3 (including) | 5.4.1.3 (including) |
| Asa_with_firepower_services | Cisco | 5.4.1.4 (including) | 5.4.1.4 (including) |
| Asa_with_firepower_services | Cisco | 5.4.1.5 (including) | 5.4.1.5 (including) |
| Asa_with_firepower_services | Cisco | 5.4.05 (including) | 5.4.05 (including) |
| Asa_with_firepower_services | Cisco | 6.0.0 (including) | 6.0.0 (including) |