| CNNVD-ID编号 | CNNVD-201905-023 | CVE编号 | CVE-2018-15388 |
| 发布时间 | 2019-05-01 | 更新时间 | 2019-05-14 |
| 漏洞类型 | 资源管理错误 | 漏洞来源 | The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.,Jason Moulder of Pratum |
| 危险等级 | 高危 | 威胁类型 | 远程 |
| 厂商 | N/A | ||
Cisco ASA Software和FTD Software中的WebVPN登录进程存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下产品及版本受到影响：Cisco 3000 Series Industrial Security Appliances；Adaptive Security Appliance (ASA) 1000V Cloud Firewall；ASA 5505 Series Adaptive Security Appliance1
ASA 5500-X Series Firewalls；ASA Services Module for Cisco Catalyst 6500 Series Switches和Cisco 7600 Series Routers；Adaptive Security Virtual Appliance (ASAv)；Firepower 2100 Series；Firepower 4100 Series；Firepower 9300 ASA Security Module；Firepower Threat Defense Virtual。
目前厂商已发布升级了Cisco Adaptive Security Appliance Software和Firepower Threat Defense Software 资源管理错误漏洞的补丁，Cisco Adaptive Security Appliance Software和Firepower Threat Defense Software 资源管理错误漏洞的补丁获取链接：
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-sd-cpu-dos
来源:www.cisco.com
来源:tools.cisco.com
来源:nvd.nist.gov
来源:www.auscert.org.au
来源:www.securityfocus.com
来源:vigilance.fr
链接：https://vigilance.fr/vulnerability/Cisco-ASA-infinite-loop-via-WebVPN-Login-Process-29191
暂无
计算
安全
数据库
网络和加速
AI应用
