CSCvm43975 - Cisco Adaptive Security Appliance Software and FTD Software Denial of Service Vulnerability

[mdtcco]

What is the implication of this bug on a firewall in multi-context mode? Could an attack on one of the contexts cause a reload of all contexts?

[SecureWorks Device Management]

Also, there is now fixed versions listed for ASA, is anyone aware of what the fixed versions for FTD are?

[MuddassirHussain33]

It is mentioned on the article

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability Cisco Security - Cisco Test Application

Affected Products

• Vulnerable Products

  This vulnerability affects Cisco ASA Software Release 9.4 and later and Cisco FTD Software Release 6.0 and later on both physical and virtual appliances if SIP inspection is enabled and the software is running on any of the following Cisco products:

  • 3000 Series Industrial Security Appliance (ISA)
  • ASA 5500-X Series Next-Generation Firewalls
  • ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers
  • Adaptive Security Virtual Appliance (ASAv)
  • Firepower 2100 Series Security Appliance
  • Firepower 4100 Series Security Appliance
  • Firepower 9300 ASA Security Module
  • FTD Virtual (FTDv)

  But Cisco bug states only 9.9(2) is impacted, please advise?