Cisco Security Advisory: Cisco ASA Software VPN ISAKMP Denial of Service Vulnerability

Cisco Security Advisory: Cisco ASA Software VPN ISAKMP Denial of Service Vulnerability

Advisory ID: cisco-sa-20151021-asa-ike

Revision 1.0

For Public Release 2015 October 21 16:00  UTC (GMT)

+-----------------------------------------------------------
----------

Summary
=======

A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) code of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an affected system to reload.

The vulnerability is due to improper handling of Internet Security Association and Key Management Protocol (ISAKMP) packets. An attacker could exploit this vulnerability by sending crafted UDP packets to the affected system. A successful exploit could allow the attacker to cause an affected system to reload.

Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available. This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-ike