Cisco Secure Firewall ASA and FTD Software SSL/TLS Certificate Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software). This vulnerability allows an unauthenticated, remote attacker to cause the device to reload unexpectedly, leading to a DoS condition. The issue arises from improper parsing of SSL/TLS certificates. An attacker could exploit this vulnerability by sending a crafted SSL/TLS certificate to an affected system through a listening SSL/TLS socket.

Impact

Exploitation of this vulnerability causes the device to reload unexpectedly, creating a denial-of-service condition.

Remediation

Cisco has released free software updates that address this vulnerability. Customers with service contracts should obtain these security fixes through their usual update channels. For instructions on upgrading a Cisco Secure FTD device, consult the appropriate Cisco Secure FMC upgrade guide.