CVE Vulnerabilities

CVE-2016-6437

Published: Oct 27, 2016 | Modified: Jul 29, 2017
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).

Affected Software

Name Vendor Start Version End Version
Wide_area_application_services Cisco 5.3.1 (including) 5.3.1 (including)
Wide_area_application_services Cisco 5.3.3 (including) 5.3.3 (including)
Wide_area_application_services Cisco 5.3.5 (including) 5.3.5 (including)
Wide_area_application_services Cisco 5.3.5a (including) 5.3.5a (including)
Wide_area_application_services Cisco 5.3.5b (including) 5.3.5b (including)
Wide_area_application_services Cisco 5.3.5c (including) 5.3.5c (including)
Wide_area_application_services Cisco 5.3.5d (including) 5.3.5d (including)
Wide_area_application_services Cisco 5.3.5e (including) 5.3.5e (including)
Wide_area_application_services Cisco 5.3.5f (including) 5.3.5f (including)
Wide_area_application_services Cisco 6.1.0 (including) 6.1.0 (including)
Wide_area_application_services Cisco 6.1.1 (including) 6.1.1 (including)
Wide_area_application_services Cisco 6.2.1 (including) 6.2.1 (including)
Wide_area_application_services Cisco 6.2.1a (including) 6.2.1a (including)

References