CSCvz09106 - Cisco ASA and FTD Software SSL VPN DOS Vulnerability

[vlad6]

Hi,

Does someone know if ASA code train 9.14.x & 9.13.x are also affected by this WEBVPN vulnerability  ?

We are running some older supported boxes on code train 9.12(4)30. Will there be also fixed code available for code train 9.12.x ?

Thanks Vlad

[tvotna]

All ASA versions below 9.16.3.3 are affected. There were no plans to backport the fix into older versions, because this is an architectural fix, but this decision might change in the future.

[PlanaRamirez]

Hi Vlad6,

You can upgrade to:

• 9.12.4.41 https://www.cisco.com/web/software/280775065/152946/ASA-9124-Interim-Release-Notes.html
• 9.14.4.8 

Further information on bug progress can be found following this link: 

• Cisco ASA and FTD Software AnyConnect SSL VPN Denial of Service Vulnerability

I Hope this will be helpful.

Regards,

Alfred P. R.