Absolute Secure Access Server Denial-of-Service Vulnerability

A memory management vulnerability has been identified in Absolute Secure Access Server versions 9.0 prior to 13.54. This vulnerability allows attackers with network access to the server to cause a denial-of-service condition by sending a specially crafted sequence of packets. The attack is relatively simple to execute and does not require any special privileges or user interaction. While the vulnerability leads to a significant loss of availability, it does not impact the confidentiality or integrity of the system.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing a significant loss of availability on the affected server.