Description
Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service (traffic loop and device crash) via a packet that triggers multiple matches, aka Bug ID CSCui45606.
References
- 20140710 Cisco ASA Filter and Inspect Overlap Denial of Service Vulnerability vendor-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34911
- cisco-asa-cve20135567-dos(94445) vdb-entry
- 1030555 vdb-entry
- 68504 vdb-entry