CVE-2019-1983— Cisco Email Security Appliance and Cisco Content Security Management Appliance Denial of Service Vulnerability

Cisco Email Security Appliance and Cisco Content Security Management Appliance Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to cause repeated crashes in some internal processes that are running on the affected devices, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of email attachments. An attacker could exploit this vulnerability by sending an email message with a crafted attachment through an affected device. A successful exploit could allow the attacker to cause specific processes to crash repeatedly, resulting in the complete unavailability of both the Cisco Advanced Malware Protection (AMP) and message tracking features and in severe performance degradation while processing email. After the affected processes restart, the software resumes filtering for the same attachment, causing the affected processes to crash and restart again. A successful exploit could also allow the attacker to cause a repeated DoS condition. Manual intervention may be required to recover from this situation.

N/A

输入验证不恰当

Cisco Content Security Management Appliance和Cisco Email Security Appliance 输入验证错误漏洞

Cisco Content Security Management Appliance（SMA）和Cisco Email Security Appliance（ESA）都是美国思科（Cisco）公司的产品。Cisco Content Security Management Appliance是一套内容安全管理设备。该设备主要用于管理电子邮件和Web安全设备的所有策略、报告、审计信息等。Cisco Email Security Appliance是一个电子邮件安全设备。 Cisco Email Securi

N/A

N/A