Buffer overflow in Cisco Asa 5500-X Series Ips Ssp Software

CVE-2013-1243

The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote attackers to cause a denial of service (MainApp process hang) via malformed IPv4 packets, aka Bug ID CSCtx18596.

Vulnerability class: Buffer Overflow

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References