CVE-2013-5512 — Race Condition in Cisco Adaptive Security Appliance Software

CWE-362 — Race ConditionCWE-20 — Improper Input ValidationCWE-264CWE-3994 documents4 sources
Severity
7.1HIGHNVD
EPSS
0.1%
top 70.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Adaptive Security Appliance Software
Timeline
PublishedOct 13
Latest updateMay 17

Description

Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.5), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.4), 9.0.x before 9.0(1.4), and 9.1.x before 9.1(1.2), in certain conditions involving the spoof-server option or ActiveX or Java response inspection, allows remote attackers to cause a denial of service (device reload) via a crafted HTTP response…

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-rj67-qpp5-5cr5: Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8↗2022-05-17
▶
CVEList
CVE-2013-5512: Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8↗2013-10-13
▶

📋Vendor Advisories

1
Cisco
Multiple Vulnerabilities in Cisco ASA Software↗2013-10-09
▶
CVE-2013-5512 — Race Condition in Cisco | cvebase