CVE-2008-2734
- State
- Published
- Severity
- Not scored
- Published
- Sep 4, 2008
- Updated
- Aug 7, 2024
- Reserved
- Jun 16, 2008
Description
Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1020812vdb-entry
- cisco-asa-sslvpn-dos(44868)vdb-entry
- 20080903 Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASAvendor-advisory
- 20080903 Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of the Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASAvendor-advisory
- 31730third-party-advisory
- 30998vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.