Vulnerability in Cisco Asa

CVE-2014-3388

The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9.2 before 9.2(2) allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CSCuo68327.

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Asa — versions 9.0, 9.1, 9.2
  • N/a — versions n/a

Weakness classification (CWE)

References