Menu
Cisco patches high severity flaws in its Web Security Appliance

Cisco patches high severity flaws in its Web Security Appliance

The flaws can be exploited with specifically crafted HTTP requests to cause denial-of-service conditions

Cisco Systems has fixed four denial-of-service vulnerabilities that attackers could exploit to cause Web Security Appliance devices to stop processing traffic correctly.

The Cisco Web Security Appliance (WSA) is a line of security devices that inspect Web traffic going in and out of an organization in order to detect malware, prevent data leaks, and enforce Internet access policies for users and applications. The devices run an operating system called Cisco AsyncOS.

One of the four DoS vulnerabilities fixed Wednesday by Cisco stems from how the OS handles a specific HTTP response code. An attacker could send a specifically crafted HTTP request in order to consume the entire memory of an affected device.

If this happens, the device will no longer accept new incoming connection requests, Cisco said in an advisory.

All Cisco AsyncOS versions older than 9.0.1-162 are affected. Users are advised to upgrade to this version. Version 9.1 is also unaffected.

Another DoS vulnerability is caused by a lack of proper input validation of the packets that make up HTTP POST requests. The flaw can be exploited through specifically crafted HTTP requests and can lead to the proxy process becoming unresponsive and the WSA reloading.

Only AsyncOS version 8.0 is affected by this vulnerability. Users can upgrade to 8.0.6-119 or 9.0.1-162, which contains patches for all four flaws, Cisco said in an advisory.

The third vulnerability stems from a failure to free memory when a file range for cached content is requested through the WSA. By opening multiple connections and requesting file ranges, an attacker can cause the WSA to run out of memory and stop passing traffic.

Versions 8.5 to 8.8 of AsyncOS are affected and Cisco recommends upgrading to 9.0.1-162.

The fourth vulnerability occurs because AsyncOS does not properly allocate space for the HTTP header and an expected HTTP payload. Exploiting this flaw can cause the proxy process to reload and the traffic to be stopped.

The flaw affects AsyncOS versions 8.8 and lower. Cisco has fixed the flaw in versions 8.5.3-069 for the 8.5 branch and 9.0.1-162.

In addition to the WSA flaws, Cisco also patched a moderate severity cross-site scripting vulnerability in the Web interface of the Cisco Unified Computing System (UCS) Central Software.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

The making of an MSSP: a blueprint for growth in NZ

The making of an MSSP: a blueprint for growth in NZ

Partners are actively building out security practices and services to match, yet remain challenged by a lack of guidance in the market. This exclusive Reseller News Roundtable - in association with Sophos - assessed the making of an MSSP, outlining the blueprint for growth and how partners can differentiate in New Zealand.

The making of an MSSP: a blueprint for growth in NZ
Reseller News Platinum Club celebrates leading partners in 2018

Reseller News Platinum Club celebrates leading partners in 2018

The leading players of the New Zealand channel came together to celebrate a year of achievement at the inaugural Reseller News Platinum Club lunch in Auckland. Following the Reseller News Innovation Awards, Platinum Club provides a platform to showcase the top performing partners and start-ups of the past 12 months, with more than ​​50 organisations in the spotlight.​​​

Reseller News Platinum Club celebrates leading partners in 2018
Meet the top performing HP partners in NZ

Meet the top performing HP partners in NZ

HP has honoured its leading partners in New Zealand during 2018, following 12 months of growth through the local channel. Unveiled during the fourth running of the ceremony in Auckland, the awards recognise and celebrate excellence, growth, consistency and engagement of standout Kiwi partners.

Meet the top performing HP partners in NZ
Show Comments