CVE-2018-15383— Cisco Adaptive Security Appliance Software和Firepower Threat Defense Software 资源管理错误漏洞

Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability

A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service (DoS) condition. The vulnerability exists because the affected devices have a limited amount of Direct Memory Access (DMA) memory and the affected software improperly handles resources in low-memory conditions. An attacker could exploit this vulnerability by sending a sustained, high rate of malicious traffic to an affected device to exhaust memory on the device. A successful exploit could allow the attacker to exhaust DMA memory on the affected device, which could cause the device to reload and result in a temporary DoS condition.

N/A

未加控制的资源消耗(资源穷尽)

Cisco Adaptive Security Appliance Software和Firepower Threat Defense Software 资源管理错误漏洞

Cisco ASA 5506-X with FirePOWER Services等都是美国思科（Cisco）公司不同系列的安全设备。Adaptive Security Appliance（ASA）Software和Firepower Threat Defense（FTD）Software都是使用在其中的操作系统。 Cisco ASA Software和FTD Software中的cryptographic hardware accelerator驱动程序存在拒绝服务漏洞。远程攻击者可通过持续高频率的发送流

N/A

N/A