—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1
Below is the list of Cisco Security Advisories published by Cisco PSIRT on 2020-May-06.
The following PSIRT security advisories (12 High) were published at 16:00 UTC today.
Table of Contents:
1) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability – SIR: High
2) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability – SIR: High
3) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability – SIR: High
4) Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability – SIR: High
5) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability – SIR: High
6) Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability – SIR: High
7) Cisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability – SIR: High
8) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities – SIR: High
9) Cisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability – SIR: High
10) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability – SIR: High
11) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability – SIR: High
12) Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability – SIR: High
+——————————————————————–
1) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability
CVE-2020-3259
SIR: High
CVSS Score v(3.0): 7.5
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-info-disclose-9eJtycMB [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-info-disclose-9eJtycMB”]
+——————————————————————–
2) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability
CVE-2020-3195
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ospf-memleak-DHpsgfnv [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ospf-memleak-DHpsgfnv”]
+——————————————————————–
3) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability
CVE-2020-3196
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-vpn-dos-qY7BHpjN [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssl-vpn-dos-qY7BHpjN”]
+——————————————————————–
4) Cisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability
CVE-2020-3283
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-dos-4v5nmWtZ [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-dos-4v5nmWtZ”]
+——————————————————————–
5) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability
CVE-2020-3298
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ospf-dos-RhMQY8qx [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ospf-dos-RhMQY8qx”]
+——————————————————————–
6) Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability
CVE-2020-3179
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-2-sS2h7aWe [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-2-sS2h7aWe”]
+——————————————————————–
7) Cisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability
CVE-2020-3255
SIR: High
CVSS Score v(3.0): 7.5
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-N2vQZASR [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-N2vQZASR”]
+——————————————————————–
8) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities
CVE-2020-3254
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-mgcp-SUqB8VKH [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-mgcp-SUqB8VKH”]
+——————————————————————–
9) Cisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability
CVE-2020-3189
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-Rdpe34sd8 [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dos-Rdpe34sd8”]
+——————————————————————–
10) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability
CVE-2020-3191
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ipv6-67pA658k [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ipv6-67pA658k”]
+——————————————————————–
11) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability
CVE-2020-3187
SIR: High
CVSS Score v(3.0): 9.1
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-path-JE3azWw43 [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-path-JE3azWw43”]
+——————————————————————–
12) Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability
CVE-2020-3125
SIR: High
CVSS Score v(3.0): 8.1
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-asa-kerberos-bypass-96Gghe2sS [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-asa-kerberos-bypass-96Gghe2sS”]
—–BEGIN PGP SIGNATURE—–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=lOxq
—–END PGP SIGNATURE—–
_______________________________________________
cust-security-announce mailing list
cust-security-announce@cisco.com
To unsubscribe, send the command “unsubscribe” in the subject of your message to cust-security-announce-leave@cisco.com
