Vulnerability Description
Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Asa 5580 | <= 8.1\(1\) |
Related Weaknesses (CWE)
References
- http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.htmlPatch
- http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.htmlPatch
FAQ
What is CVE-2009-4914?
CVE-2009-4914 is a vulnerability with a CVSS score of 7.8 (HIGH). Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via Subject Alternativ...
How severe is CVE-2009-4914?
CVE-2009-4914 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4914?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Asa 5580.