CVE-2022-20927

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this vulnerability by ensuring that the device will connect to an SSL/TLS server that is using specific encryption parameters. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssl-client-dos-cCrQPkA

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.7:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.10:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.12:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.13:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.16:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.19:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.21:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.10:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.15:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.19:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.30:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.4:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.8:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.13:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.15:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.9:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.11:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.13:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.15:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.18:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.7:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.10:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.15:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.16:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.17:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.21:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:cisco:firepower_threat_defense::::::::
	cpe:2.3:a:cisco:firepower_threat_defense::::::::
	cpe:2.3:a:cisco:firepower_threat_defense:6.6.0:::::::*
	cpe:2.3:a:cisco:firepower_threat_defense:6.6.0.1:::::::*
	cpe:2.3:a:cisco:firepower_threat_defense:6.6.1:::::::*
	cpe:2.3:a:cisco:firepower_threat_defense:6.6.3:::::::*
	cpe:2.3:a:cisco:firepower_threat_defense:6.6.4:::::::*
	cpe:2.3:a:cisco:firepower_threat_defense:6.6.5:::::::*
	cpe:2.3:a:cisco:firepower_threat_defense:6.6.5.1:::::::*

Configuration 3 (hide)

cpe:2.3:a:cisco:firepower_services_software_for_asa:-:*:*:*:*:*:*:*

History

25 Jan 2024, 17:15

Type	Values Removed	Values Added
References	{'url': 'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssl-client-dos-cCrQPkA', 'name': 'https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssl-client-dos-cCrQPkA', 'tags': ['Patch', 'Vendor Advisory'], 'refsource': 'MISC'}	() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssl-client-dos-cCrQPkA -

07 Nov 2023, 03:43

Type	Values Removed	Values Added
Summary	A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this vulnerability by ensuring that the device will connect to an SSL/TLS server that is using specific encryption parameters. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.	A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this vulnerability by ensuring that the device will connect to an SSL/TLS server that is using specific encryption parameters. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.

16 Aug 2023, 16:17

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1.2:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.3.15:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1.21:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.1.10:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.3.18:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.1.15:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.3:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.2.13:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.15.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.15.1.21:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.3.9:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1.7:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.15.1.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.2.15:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.3.13:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.1.19:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.15.1.15:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.2:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1.16:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1.19:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.3.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1.10:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.15.1.10:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.2.8:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.15.1.7:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.15.1.16:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.2.4:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.15.1.17:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.3.11:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1.12:::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.16:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.17:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.21:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.15:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.19:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.18:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.16:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.11:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.9:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.19:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.7:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.21:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.12:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.8:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.10:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.13:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.15:::::::*

15 Aug 2023, 18:20

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance:9.13.1.13:::::::* cpe:2.3:a:cisco:adaptive_security_appliance:9.14.1.30:::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.30:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:9.13.1.13:::::::*
First Time		Cisco adaptive Security Appliance Software

08 Aug 2023, 14:22

Type	Values Removed	Values Added
CWE	~~CWE-119~~	NVD-CWE-noinfo

Information

Published : 2022-11-15 21:15

Updated : 2024-02-28 19:29

NVD link : CVE-2022-20927

Mitre link : CVE-2022-20927

CVE.ORG link : CVE-2022-20927

JSON object : View

Products Affected

cisco

firepower_threat_defense
firepower_services_software_for_asa
adaptive_security_appliance_software

CWE

NVD-CWE-noinfo CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

6.5 /10