中文描述:

Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software）都是美国思科（Cisco）公司的产品。Cisco Firepower Threat Defense是一套提供下一代防火墙服务的统一软件。Cisco Adaptive Security Appliances Software是一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。 Cisco Adaptive Security Appliance (ASA) Software和Cisco Firepower Threat Defense (FTD) Software中的IKEv2（英特网密钥交换协议2版本）功能存在资源管理错误漏洞，该漏洞源于该漏洞源于程序没有正确管理系统内存。攻击者可通过发送恶意的IKEv1流量利用该漏洞造成拒绝服务（系统内存资源耗尽）。以下产品及版本受到影响：Cisco Adaptive Security Virtual Appliance (ASAv)；Firepower 2100 Series Appliances；Firepower Threat Defense Virtual (FTDv)。

英文描述:

A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper management of system memory. An attacker could exploit this vulnerability by sending malicious IKEv1 traffic to an affected device. The attacker does not need valid credentials to authenticate the VPN session, nor does the attacker's source address need to match a peer statement in the crypto map applied to the ingress interface of the affected device. An exploit could allow the attacker to exhaust system memory resources, leading to a reload of an affected device.

CWE类型:

标签:

中文解决方案:

英文解决方案:

临时解决方案:

发布时间:

修改时间:

创建时间:

更新时间:

当前版本: v3

主要语言: EN

支持语言: