CVE-2009-4919 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco ASA 5580

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
1.1%
top 22.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco ASA 5580
Timeline
PublishedJun 29
Latest updateMay 2

Description

Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID CSCsu43121.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDcisco/asa_55808.1\(1\)

Patches

Patch: www.cisco.com ↗Patch: www.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-6hqc-c4rr-fj7q: Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8↗2022-05-02
▶
CVEList
CVE-2009-4919: Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8↗2010-06-29
▶
CVE-2009-4919 — Cisco ASA 5580 vulnerability | cvebase