CVE-2015-6290 Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption from stale TCP connections) via crafted responses, aka Bug ID CSCuw10426.
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption from stale TCP connections) via crafted responses, aka Bug ID CSCuw10426.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco web security virtual appliance | = 8.0.5 | No fix listed |
| cisco web security virtual appliance | = 8.0.6 | No fix listed |
| cisco web security virtual appliance | = 8.0.7 | No fix listed |
| cisco web security virtual appliance | = 8.0_base | No fix listed |
References
- 20150909 Cisco Web Security Appliance Malformed HTTP Response Denial of Service Vulnerability vendor-advisory
- 76687 third-party-advisory vdb-entry
- 1033530 third-party-advisory vdb-entry