Description
The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (instability, memory consumption, or device reload) by leveraging (1) administrative access or (2) Clientless SSL VPN access to provide a crafted XML document, aka Bug ID CSCut14209.
References
- 1035976 vdb-entry
- 20160517 Cisco Adaptive Security Appliance XML Parser Denial of Service Vulnerability vendor-advisory