CSCux42019 - Cisco ASA IKEv1 and IKEv2 Buffer Overflow Vulnerability

[Jesus Cano Villar]

Hi,

WE have a CISCO ASA 5520 with firmware  8.4.7-15 and i would like to know if this appliance/firmware is affected by this new vulnerability "ASA IKEv1/IKEv2 - Buffer Overflow Vulnerability".

Thanks a lot

[Aditya Ganjoo · Accepted solution]

Hi Jesus,

Yes it is affected.

Please upgrade to the recommended fixes.

Since it is fixed in 8.4.7.30 you can try upgrading to this image.

Regards,

Aditya

[f.djoubar1]

Hello, 

we do have an issue. We have a lot of 5505. We were given the 9.2.4.5 patch and we have since that two reactions: 

- NAT rules disappear. 

- Firewall reboot without being able to take hand on the firewall except on console mode to do a rollback. 

Do you have another hotfix available? or a solution to not crash the firewalls? 

Thank you in advance, 

[Aditya Ganjoo]

Hi Jesus,

Yes we are facing a lot of issues on this code.

Version 9.2(4.7) is expected to be released in a matter of days, so if You wish you can wait till then and upgrade to that code.

If not then you can downgrade to 9.1.7.4 code which has the fix for the bug and is a stable code.

Regards,

Aditya

[f.djoubar1]

Thank you for your quick answer Aditya.

Do you know when will be available this version 9.2.4.7? 

[Aditya Ganjoo]

Hi Jesus,

ASA 9.2(4.7) will never be posted, it was superseded by 9.2(4.8) which is
already on CCO.

But since you are using ASA 5520 you would be interetsed in seeing this:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa92/release/notes/asarn92.html#pgfId-773511

I think you should try using 9.1.7.4.

Regards,

Aditya

Please rate helpful posts.

[f.djoubar1]

Thank you Aditya. We will try the 9.1.7.4. Could you please provide us a link? 

[Aditya Ganjoo]

Hi Jesus,

Here is the link:

https://software.cisco.com/download/release.html?mdfid=279916878&flowid=4374&softwareid=280775065&release=8.2.5%20Interim&relind=AVAILABLE&rellifecycle=&reltype=latest

Please browse to All releases and under interim you would find 9.1.7.4 image.

Regards,

Aditya

Please rate helpful posts.

[f.djoubar1]

Thank you very much. 

[Aditya Ganjoo]

Hi Jesus,

Happy to help :)

Regards,

Aditya

Please rate helpful posts.