Test ID:	1.3.6.1.4.1.25623.1.0.106054
Category:	CISCO
Title:	Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns1)
Summary:	A vulnerability in the DNS code of Cisco ASA may lead to a; denial of service.
Description:	Summary: A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Vulnerability Insight: A vulnerability in the DNS code could allow an unauthenticated, remote attacker to cause an affected system to reload. The vulnerability is due to improper processing of DNS packets. An attacker could exploit this vulnerability by sending a request to an affected Cisco ASA appliance to cause it to generate a DNS request packet. The attacker would need to spoof the reply packet with a crafted DNS response. Only traffic directed to the affected device can be used to exploit this vulnerability. Vulnerability Impact: An unauthenticated, remote attacker could cause the system to reload. Affected Software/OS: Version 7.2, 8.2, 8.3, 8.4, 8.5, 8.6, 8.7, 9.0, 9.1, 9.2, 9.3 and 9.4 on Cisco Adaptive Security Virtual Appliance (ASAv), Cisco ASA 1000V Cloud Firewall, Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-6325 BugTraq ID: 77260 http://www.securityfocus.com/bid/77260 Cisco Security Advisory: 20151021 Cisco ASA Software DNS Denial of Service Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns1 http://www.securitytracker.com/id/1033913
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.