Double Free in Cisco Adaptive Security Appliance
CVE-2018-0101
A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute cod…
Vulnerability class: Double Free
EPSS: 0.928 (99.8th percentile) — read the EPSS interpretation.
Affected products
- N/a Cisco Adaptive Security Appliance — versions Cisco Adaptive Security Appliance
Weakness classification (CWE)
Public proof-of-concept exploits
References
- icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cis… (x_refsource_MISC)
- 102845 (vdb-entry, x_refsource_BID)
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129… (x_refsource_CONFIRM)
- 1040292 (vdb-entry, x_refsource_SECTRACK)
- 43986 (exploit, x_refsource_EXPLOIT-DB)
- pastebin.com/YrBcG2Ln (x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-0101?
- CVE-2018-0101 is a vulnerability in Cisco Adaptive Security Appliance, classified under Double Free. Published 2018-01-29.
- Is CVE-2018-0101 known to be exploited?
- 58 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.