NVD

Id
15917  
Name
CVE-2010-4679  
Description
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures, which allows remote OCSP responders to cause a denial of service (TCP socket exhaustion) by rejecting connection attempts, aka Bug ID CSCsz36816.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2011-01-07  
Modified Date
2011-02-02  
Seq
2010-4679  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90223 15917 CVE-2010-4679 http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf  View
90224 15917 CVE-2010-4679 45767  View
90225 15917 CVE-2010-4679 1024963  View
90226 15917 CVE-2010-4679 asa-ocsp-dos(64605)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30879 JVNDB-2011-001118 Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 Cisco Adaptive Security Appliances (ASA) デバイスは、Online Certificate Status Protocol (OCSP) 接続の失敗時における処理を適切に行わないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4679 47259 CVE-2010-4679 15917 7.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001118.html 2011-01-07 2011-02-24 View