CVE-2016-1287 Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7),....
CriticalCVSS 9.8
EPSS 74.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco adaptive security appliance software | = 7.2.1 | No fix listed |
| cisco adaptive security appliance software | = 7.2.1.9 | No fix listed |
| cisco adaptive security appliance software | = 7.2.1.13 | No fix listed |
| cisco adaptive security appliance software | = 7.2.1.19 | No fix listed |
| cisco adaptive security appliance software | = 7.2.1.24 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2.6 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2.10 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2.14 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2.18 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2.19 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2.22 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2.34 | No fix listed |
| cisco adaptive security appliance software | = 7.2.3 | No fix listed |
| cisco adaptive security appliance software | = 7.2.3.1 | No fix listed |
| cisco adaptive security appliance software | = 7.2.3.12 | No fix listed |
| cisco adaptive security appliance software | = 7.2.3.16 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4.6 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4.9 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4.18 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4.25 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4.27 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4.30 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4.33 | No fix listed |
Show 174 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco adaptive security appliance software | = 7.2.5 | No fix listed |
| cisco adaptive security appliance software | = 7.2.5.2 | No fix listed |
| cisco adaptive security appliance software | = 7.2.5.4 | No fix listed |
| cisco adaptive security appliance software | = 7.2.5.7 | No fix listed |
| cisco adaptive security appliance software | = 7.2.5.8 | No fix listed |
| cisco adaptive security appliance software | = 7.2.5.10 | No fix listed |
| cisco adaptive security appliance software | = 7.2.5.12 | No fix listed |
| cisco adaptive security appliance software | = 7.2.5.16 | No fix listed |
| cisco adaptive security appliance software | = 8.2.0.45 | No fix listed |
| cisco adaptive security appliance software | = 8.2.1 | No fix listed |
| cisco adaptive security appliance software | = 8.2.1.11 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.9 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.10 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.12 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.16 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.17 | No fix listed |
| cisco adaptive security appliance software | = 8.2.3 | No fix listed |
| cisco adaptive security appliance software | = 8.2.4 | No fix listed |
| cisco adaptive security appliance software | = 8.2.4.1 | No fix listed |
| cisco adaptive security appliance software | = 8.2.4.4 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.13 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.22 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.26 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.33 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.40 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.41 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.46 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.48 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.50 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.52 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.55 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.57 | No fix listed |
| cisco adaptive security appliance software | = 8.3.1 | No fix listed |
| cisco adaptive security appliance software | = 8.3.1.1 | No fix listed |
| cisco adaptive security appliance software | = 8.3.1.4 | No fix listed |
| cisco adaptive security appliance software | = 8.3.1.6 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.4 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.13 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.23 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.25 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.31 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.33 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.34 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.37 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.39 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.40 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.41 | No fix listed |
| cisco adaptive security appliance software | = 8.3.2.44 | No fix listed |
| cisco adaptive security appliance software | = 8.4.0 | No fix listed |
| cisco adaptive security appliance software | = 8.4.1 | No fix listed |
| cisco adaptive security appliance software | = 8.4.1.3 | No fix listed |
| cisco adaptive security appliance software | = 8.4.1.11 | No fix listed |
| cisco adaptive security appliance software | = 8.4.2 | No fix listed |
| cisco adaptive security appliance software | = 8.4.2.1 | No fix listed |
| cisco adaptive security appliance software | = 8.4.2.8 | No fix listed |
| cisco adaptive security appliance software | = 8.4.3 | No fix listed |
| cisco adaptive security appliance software | = 8.4.3.8 | No fix listed |
| cisco adaptive security appliance software | = 8.4.3.9 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4.1 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4.3 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4.5 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4.9 | No fix listed |
| cisco adaptive security appliance software | = 8.4.5 | No fix listed |
| cisco adaptive security appliance software | = 8.4.5.6 | No fix listed |
| cisco adaptive security appliance software | = 8.4.6 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7.3 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7.15 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7.22 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7.23 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7.26 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7.28 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7.29 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.1 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.6 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.7 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.14 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.17 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.18 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.19 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.21 | No fix listed |
| cisco adaptive security appliance software | = 8.5.1.24 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.1 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.2 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.5 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.10 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.12 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.13 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.14 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.17 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.1 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.3 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.4 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.7 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.8 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.11 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.13 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.16 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.17 | No fix listed |
| cisco adaptive security appliance software | = 9.0.1 | No fix listed |
| cisco adaptive security appliance software | = 9.0.2 | No fix listed |
| cisco adaptive security appliance software | = 9.0.2.10 | No fix listed |
| cisco adaptive security appliance software | = 9.0.3 | No fix listed |
| cisco adaptive security appliance software | = 9.0.3.6 | No fix listed |
| cisco adaptive security appliance software | = 9.0.3.8 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.1 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.5 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.7 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.17 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.20 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.24 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.26 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.29 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.33 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.35 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.37 | No fix listed |
| cisco adaptive security appliance software | = 9.1.1 | No fix listed |
| cisco adaptive security appliance software | = 9.1.1.4 | No fix listed |
| cisco adaptive security appliance software | = 9.1.2 | No fix listed |
| cisco adaptive security appliance software | = 9.1.2.8 | No fix listed |
| cisco adaptive security appliance software | = 9.1.3 | No fix listed |
| cisco adaptive security appliance software | = 9.1.3.2 | No fix listed |
| cisco adaptive security appliance software | = 9.1.4 | No fix listed |
| cisco adaptive security appliance software | = 9.1.4.5 | No fix listed |
| cisco adaptive security appliance software | = 9.1.5 | No fix listed |
| cisco adaptive security appliance software | = 9.1.5.10 | No fix listed |
| cisco adaptive security appliance software | = 9.1.5.12 | No fix listed |
| cisco adaptive security appliance software | = 9.1.5.15 | No fix listed |
| cisco adaptive security appliance software | = 9.1.5.21 | No fix listed |
| cisco adaptive security appliance software | = 9.1.6 | No fix listed |
| cisco adaptive security appliance software | = 9.1.6.1 | No fix listed |
| cisco adaptive security appliance software | = 9.1.6.4 | No fix listed |
| cisco adaptive security appliance software | = 9.1.6.6 | No fix listed |
| cisco adaptive security appliance software | = 9.1.6.8 | No fix listed |
| cisco adaptive security appliance software | = 9.1.6.10 | No fix listed |
| cisco adaptive security appliance software | = 9.2.1 | No fix listed |
| cisco adaptive security appliance software | = 9.2.2 | No fix listed |
| cisco adaptive security appliance software | = 9.2.2.4 | No fix listed |
| cisco adaptive security appliance software | = 9.2.2.7 | No fix listed |
| cisco adaptive security appliance software | = 9.2.2.8 | No fix listed |
| cisco adaptive security appliance software | = 9.2.3 | No fix listed |
| cisco adaptive security appliance software | = 9.2.3.3 | No fix listed |
| cisco adaptive security appliance software | = 9.2.3.4 | No fix listed |
| cisco adaptive security appliance software | = 9.2.4 | No fix listed |
| cisco adaptive security appliance software | = 9.2.4.2 | No fix listed |
| cisco adaptive security appliance software | = 9.2.4.4 | No fix listed |
| cisco adaptive security appliance software | = 9.3.1 | No fix listed |
| cisco adaptive security appliance software | = 9.3.1.1 | No fix listed |
| cisco adaptive security appliance software | = 9.3.2 | No fix listed |
| cisco adaptive security appliance software | = 9.3.2.2 | No fix listed |
| cisco adaptive security appliance software | = 9.3.3 | No fix listed |
| cisco adaptive security appliance software | = 9.3.3.1 | No fix listed |
| cisco adaptive security appliance software | = 9.3.3.2 | No fix listed |
| cisco adaptive security appliance software | = 9.3.3.5 | No fix listed |
| cisco adaptive security appliance software | = 9.3.3.6 | No fix listed |
| cisco adaptive security appliance software | = 9.3.5 | No fix listed |
| cisco adaptive security appliance software | = 9.4.0.115 | No fix listed |
| cisco adaptive security appliance software | = 9.4.1 | No fix listed |
| cisco adaptive security appliance software | = 9.4.1.1 | No fix listed |
| cisco adaptive security appliance software | = 9.4.1.2 | No fix listed |
| cisco adaptive security appliance software | = 9.4.1.3 | No fix listed |
| cisco adaptive security appliance software | = 9.4.1.5 | No fix listed |
| cisco adaptive security appliance software | = 9.4.2 | No fix listed |
| cisco adaptive security appliance software | = 9.4.2.3 | No fix listed |
| cisco adaptive security appliance software | = 9.5.1 | No fix listed |
| cisco adaptive security appliance software | = 9.5.2 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160210 Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability vendor-advisory
- 1034997 third-party-advisory vdb-entry
- blog.exodusintel.com exploit technical-description third-party-advisory
- 39823 exploit third-party-advisory vdb-entry
- VU#327976 third-party-advisory us-government-resource