Cisco ASA NAT Connections Table Memory Exhaustion Vulnerability

Last Update Date: 27 Feb 2013 17:50 Release Date: 27 Feb 2013 3808 Views

RISK: High Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability has been identified in Cisco ASA. A remote user can cause denial of service conditions.

A remote user can send specially crafted packets through the target system to consume memory allocated for the NAT connections table, which may prevent new connections from being established until the invalid entries expire.

Note: Vendor patch is currently unavailable.

Impact

Denial of Service

System / Technologies affected

Cisco ASA

Solutions

Note: Vendor patch is currently unavailable.

Vulnerability Identifier

CVE-2013-1138

Source

SecurityTracker