CVE-2017-13677 Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause denial-of-service th...
HighCVSS 7.5
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause denial-of-service through management console application crashes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom advanced secure gateway | >= 6.6, < 6.6.5.14 | 6.6.5.14 |
| broadcom advanced secure gateway | >= 6.7, < 6.7.3.1 | 6.7.3.1 |
| broadcom symantec proxysg | >= 6.5, < 6.5.10.8 | 6.5.10.8 |
| broadcom symantec proxysg | >= 6.6, < 6.6.5.14 | 6.6.5.14 |
| broadcom symantec proxysg | >= 6.7, < 6.7.3.1 | 6.7.3.1 |
| symantec Advanced Secure Gateway (ASG) | = 6.6 prior to 6.6.5.14 | No fix listed |
| symantec Advanced Secure Gateway (ASG) | = 6.7 prior to 6.7.3.1 | No fix listed |
| symantec ProxySG | = 6.5 prior to 6.5.10.8 | No fix listed |
| symantec ProxySG | = 6.6 prior to 6.6.5.14 | No fix listed |
| symantec ProxySG | = 6.7 prior to 6.7.3.1 | No fix listed |
References
- 103685 third-party-advisory vdb-entry
- 1040757 third-party-advisory vdb-entry
- www.symantec.com vendor-advisory