CVE-2018-0410
Description
A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial of service (DoS) condition on an affected system. The vulnerability exists because the affected software improperly manages memory resources for TCP connections to a targeted device. An attacker could exploit this vulnerability by establishing a high number of TCP connections to the data interface of an affected device via IPv4 or IPv6. A successful exploit could allow the attacker to exhaust system memory, which could cause the system to stop processing new connections and result in a DoS condition. System recovery may require manual intervention. Cisco Bug IDs: CSCvf36610.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:cisco:web_security_appliance:9.1.1-074:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:cisco:web_security_appliance:9.1.1-074:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:9.1.2-010:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:9.1.2-022:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:9.1.2-039:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.1.1-235:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.5.1-270:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.5.1-296:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.5.2-042:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:11.0.0-641:*:*:*:*:*:*:*
- (no CPE)
- Range: unspecified
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/105098nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041535nvdThird Party AdvisoryVDB Entry
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-wsa-dosnvdVendor Advisory
News mentions
0No linked articles in our index yet.