ID

VAR-201602-0071

CVE

CVE-2016-1287

TITLE

Cisco Adaptive Security Appliance (ASA) IKEv1 and IKEv2 contains a buffer overflow vulnerability

DESCRIPTION

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019. Cisco Adaptive Security Appliance (ASA) of Internet Key Exchange version 1 and 2 (IKEv1, IKEv2) Contains a buffer overflow vulnerability. By exploiting the vulnerability, an attacker can execute code remotely. Buffer overflow (CWE-119) - CVE-2016-1287 Exodus Intelligence The advisory states that: : * "The algorithm for re-assembling IKE payloads fragmented with the Cisco fragmentation protocol contains a bounds-checking flaw that allows a heap buffer to be overflowed with attacker-controlled data. A sequence of payloads with carefully chosen parameters causes a buffer of insufficient size to be allocated in the heap which is then overflowed when fragment payloads are copied into the buffer. Attackers can use this vulnerability to execute arbitrary code on affected devices. (Cisco fragmentation protocol Divided by IKE The algorithm for recombining payloads is flawed in the bounds checking process, allowing the buffer on the heap to overflow with data that an attacker can control. Given a specially crafted payload sequence, a smaller buffer is reserved on the heap memory and overflow occurs when the payload is copied into the buffer. An attacker can exploit this vulnerability to execute arbitrary code on the affected device. )" CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer http://cwe.mitre.org/data/definitions/119.html IKEv1 and IKEv2 With VPN Systems that are configured to terminate are affected by this vulnerability. Cisco Security Advisory Whether the system is affected by the vulnerability (crypto map Whether or not ) Describes how to check. Cisco Security Advisory https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ikeCrafted by a remote attacker UDP If a packet is sent directly to the affected device, arbitrary code can be executed and the system can be hijacked. CiscoASA is an adaptive security appliance that provides a modular platform for security and VPN services, providing firewall, IPS, anti-X and VPN services. The platform provides features such as highly secure access to data and network resources

IOT TAXONOMY

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

remote

TYPE

buffer overflow

CONFIGURATIONS

EXPLOIT AVAILABILITY

PATCH

EXTERNAL IDS

REFERENCES

SOURCES

LAST UPDATE DATE

2024-11-23T22:07:52.497000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE