Wednesday, July 5, 2017

Cisco Wide Area Application Services Core Dump Denial of Service Vulnerability

A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly.

The vulnerability is due to incomplete input validation of an SMB Create Request packet. An attacker could exploit this vulnerability by sending a specially crafted Create Request packet to an affected device. An exploit could allow an attacker to cause a process to reload unexpectedly and cause a DoS condition.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
http://ift.tt/2tpIs4R A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly.

The vulnerability is due to incomplete input validation of an SMB Create Request packet. An attacker could exploit this vulnerability by sending a specially crafted Create Request packet to an affected device. An exploit could allow an attacker to cause a process to reload unexpectedly and cause a DoS condition.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
http://ift.tt/2tpIs4R
Security Impact Rating: Medium
CVE: CVE-2017-6727

from Cisco Security Advisory http://ift.tt/2tpIs4R

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.