Buffer overflow in Cisco Adaptive Security Appliance Software

CVE-2013-3458

Cisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service (device crash) via a large volume of (1) SSL or (2) TLS traffic, aka Bug ID CSCuh19462.

Vulnerability class: Buffer Overflow

EPSS: 0.007 (50.4th percentile) — read the EPSS interpretation.