NVD

Id
17702  
Name
CVE-2016-1287  
Description
Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-02-11  
Modified Date
2017-01-06  
Seq
2016-1287  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97540 17702 CVE-2016-1287 http://packetstormsecurity.com/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.html  View
97541 17702 CVE-2016-1287 20160210 Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability  View
97542 17702 CVE-2016-1287 1034997  View
97543 17702 CVE-2016-1287 https://blog.exodusintel.com/2016/02/10/firewall-hacking/  View
97544 17702 CVE-2016-1287 39823  View
97545 17702 CVE-2016-1287 VU#327976  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
609 JVNDB-2016-001382 Cisco Adaptive Security Appliance (ASA) の IKEv1 と IKEv2 の処理にバッファオーバーフローの脆弱性 Cisco Adaptive Security Appliance (ASA) の Internet Key Exchange version 1 および 2 (IKEv1, IKEv2) にはバッファオーバーフローの脆弱性が存在します。脆弱性を悪用することで、攻撃者は遠隔からコードを実行することが可能です。 CVE-2016-1287 87793 CVE-2016-1287 17702 10 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001382.html 2016-02-11 2016-02-12 View