Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability (Cisco Cisco Adaptive Security Appliance (ASA) Software)

CVE-2020-3191

HIGH 8.6

En bref

Source: NVD
EPSS: EPSS 1.86 % · centile 79 (2026-10-30)
État: PUBLISHED
Publiée: 2020-05-06 16:41 UTC
Mise à jour: 2024-11-15 17:25 UTC
Attribuée par: cisco
Statut NVD: Modified

Rechercher sur…

Description

A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper length validation of a field in an IPv6 DNS packet. An attacker could exploit this vulnerability by sending a crafted DNS query over IPv6, which traverses the affected device. An exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. This vulnerability is specific to DNS over IPv6 traffic only.

Faiblesses (CWE)

CWE-20 — Validation d'entrée incorrecte

Références

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ipv6-67pA658k

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.0	HIGH 8.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	cisco
CVSS 3.1	HIGH 8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)
CVSS 3.0	HIGH 8.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	NVD · psirt@cisco.com (Secondary)
CVSS 2.0	MEDIUM 5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2020-24462
GCVE · GCVE-0-2020-3191

Avis du CERT-FR

CERTFR-2020-AVI-274 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 6.2.3 < 6.2.3.16
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 6.3.0 < 6.3.0.6
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 6.4.0 < 6.4.0.6
cpe:2.3:o:cisco:asa_5505_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5505_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5510_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5510_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5512-x_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5512-x_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5515-x_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5515-x_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5520_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5520_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5525-x_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5525-x_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5540_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5540_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5545-x_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5545-x_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5550_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5550_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5555-x_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5555-x_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5580_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5580_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5585-x_firmware:9.4\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5585-x_firmware:96.4\(0.42\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.6 < 9.6.4.36
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.8 < 9.8.4.12
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.9 < 9.9.2.66
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.10 < 9.10.1.37
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.12 < 9.12.2.9

Produits affectés

Produit	Versions
Cisco · Cisco Adaptive Security Appliance (ASA) Software	affected n/a

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

⚠️ Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability (Cisco Cisco Adaptive Security Appliance (ASA) Software)