Vulnerability in Cisco Ironport Email Security Appliances

CVE-2014-8016

The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption) via long Subject headers in e-mail messages, aka Bug ID CSCzv93864.

EPSS: 0.012 (65.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Ironport_email_security_appliances
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)