漏洞信息详情
Cisco Adaptive Security Appliance Software 缓冲区溢出漏洞
- CNNVD编号:CNNVD-201610-564
- 危害等级: 高危
- CVE编号: CVE-2016-6432
- 漏洞类型: 缓冲区溢出
- 发布时间: 2016-10-20
- 威胁类型: 远程
- 更新时间: 2016-10-28
- 厂 商: cisco
- 漏洞来源: Slipper and Kelwin...
漏洞简介
Cisco ASA(Adaptive Security Appliances,自适应安全设备)Software是美国思科(Cisco)公司的一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。
Cisco ASA Software 9.6(2.1)之前的版本中的Identity Firewall功能存在缓冲区溢出漏洞。远程攻击者可通过发送特制的NetBiOS数据包利用该漏洞执行任意代码,完全控制系统或造成受影响的系统重载。运行Cisco ASA Software的以下产品受到影响:Cisco ASA 5500 Series Adaptive Security Appliances,Cisco ASA 5500-X Series Next-Generation Firewalls,Cisco Catalyst 6500 Series/7600 Series ASA Services Module,Cisco ASA 1000V Cloud Firewall,Cisco Adaptive Security Virtual Appliance,Cisco ASA for Firepower 9300 Series,Cisco ASA for Firepower 4100 Series,Cisco ISA 3000 Industrial Security Appliance。
漏洞公告
目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-idfw
参考网址
来源:tools.cisco.com
链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-idfw
来源:BID
链接:http://www.securityfocus.com/bid/93784
受影响实体
- Cisco Adaptive_security_appliance_software:8.4.0
- Cisco Adaptive_security_appliance_software:9.3.2
- Cisco Adaptive_security_appliance_software:9.3.2.2
- Cisco Adaptive_security_appliance_software:9.3.3
- Cisco Adaptive_security_appliance_software:9.1.2.8
补丁
- Cisco Adaptive Security Appliance Software 缓冲区溢出漏洞的修复措施
评论