NVD Vulnerability Detail

CVE-2019-1687

Summary	A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to an error in TCP-based packet inspection, which could cause the TCP packet to have an invalid Layer 2 (L2)-formatted header. An attacker could exploit this vulnerability by sending a crafted TCP packet sequence to the targeted device. A successful exploit could allow the attacker to cause a DoS condition.
Publication Date	May 4, 2019, 12:29 a.m.
Registration Date	Jan. 26, 2021, 11:40 a.m.
Last Update	Nov. 21, 2024, 1:37 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:cisco:adaptive_security_appliance_software::::::::					9.4.4.34
cpe:2.3:o:cisco:adaptive_security_appliance_software::::::::		9.5			9.6.4.25
cpe:2.3:o:cisco:adaptive_security_appliance_software::::::::		9.7			9.8.4
cpe:2.3:o:cisco:adaptive_security_appliance_software::::::::		9.9			9.9.2.50
cpe:2.3:o:cisco:adaptive_security_appliance_software::::::::		9.10			9.10.1.17
execution environment
1	cpe:2.3:h:cisco:asa_5505:-:::::::*
2	cpe:2.3:h:cisco:asa_5510:-:::::::*
3	cpe:2.3:h:cisco:asa_5512-x:-:::::::*
4	cpe:2.3:h:cisco:asa_5515-x:-:::::::*
5	cpe:2.3:h:cisco:asa_5520:-:::::::*
6	cpe:2.3:h:cisco:asa_5525-x:-:::::::*
7	cpe:2.3:h:cisco:asa_5540:-:::::::*
8	cpe:2.3:h:cisco:asa_5545-x:-:::::::*
9	cpe:2.3:h:cisco:asa_5550:-:::::::*
10	cpe:2.3:h:cisco:asa_5555-x:-:::::::*
11	cpe:2.3:h:cisco:asa_5580:-:::::::*
12	cpe:2.3:h:cisco:asa_5585-x:-:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:cisco:firepower_threat_defense::::::::	6.3.0			6.3.0.3
cpe:2.3:a:cisco:firepower_threat_defense::::::::	6.0.0			6.2.3.12

Related information, measures and tools

No	URL	タグ
1	http://www.securityfocus.com/bid/108176	Broken Link Third Party Advisory VDB Entry
2	http://www.securityfocus.com/bid/108176	Broken Link Third Party Advisory VDB Entry
3	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-ftdtcp-dos	Vendor Advisory
4	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-ftdtcp-dos	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

JVN Vulnerability Information

Cisco Adaptive Security Appliance ソフトウェアおよび Firepower Threat Defense ソフトウェアにおける入力確認に関する脆弱性

Title	Cisco Adaptive Security Appliance ソフトウェアおよび Firepower Threat Defense ソフトウェアにおける入力確認に関する脆弱性
Summary	Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Firepower Threat Defense (FTD) ソフトウェアには、入力確認に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 1, 2019, midnight
Registration Date	May 31, 2019, 3:51 p.m.
Last Update	May 31, 2019, 3:51 p.m.

Affected System

シスコシステムズ

Cisco Adaptive Security Appliance ソフトウェア

Cisco Firepower Threat Defense ソフトウェア

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-1687	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1687
National Vulnerability Database (NVD)
2	CVE-2019-1687	https://nvd.nist.gov/vuln/detail/CVE-2019-1687

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Cisco Security Advisory
1	cisco-sa-20190501-asa-ftdtcp-dos	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-ftdtcp-dos

Change Log

No	Changed Details	Date of change
1	[2019年05月31日] 掲載	May 31, 2019, 3:51 p.m.