CVE-2023-20042

Summary

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an implementation error within the SSL/TLS session handling process that can prevent the release of a session handler under specific conditions. An attacker could exploit this vulnerability by sending crafted SSL/TLS traffic to an affected device, increasing the probability of session handler leaks. A successful exploit could allow the attacker to eventually deplete the available session handler pool, preventing new sessions from being established and causing a DoS condition.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.1.28affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.19affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.23affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.4.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.20affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.1.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1affected
CiscoCisco Firepower Threat Defense Software7.0.0affected
CiscoCisco Firepower Threat Defense Software7.0.0.1affected
CiscoCisco Firepower Threat Defense Software7.0.1affected
CiscoCisco Firepower Threat Defense Software7.0.1.1affected
CiscoCisco Firepower Threat Defense Software7.0.2affected
CiscoCisco Firepower Threat Defense Software7.0.2.1affected
CiscoCisco Firepower Threat Defense Software7.0.3affected
CiscoCisco Firepower Threat Defense Software7.0.4affected
CiscoCisco Firepower Threat Defense Software7.0.5affected
CiscoCisco Firepower Threat Defense Software7.1.0affected
CiscoCisco Firepower Threat Defense Software7.1.0.1affected
CiscoCisco Firepower Threat Defense Software7.1.0.2affected
CiscoCisco Firepower Threat Defense Software7.1.0.3affected
CiscoCisco Firepower Threat Defense Software7.2.0affected
CiscoCisco Firepower Threat Defense Software7.2.0.1affected
CiscoCisco Firepower Threat Defense Software7.2.1affected
CiscoCisco Firepower Threat Defense Software7.2.2affected
CiscoCisco Firepower Threat Defense Software7.2.3affected
CiscoCisco Firepower Threat Defense Software7.3.0affected
CiscoCisco Firepower Threat Defense Software7.3.1affected
CiscoCisco Firepower Threat Defense Software7.3.1.1affected

Weaknesses

  • CWE-404: Improper Resource Shutdown or Release

ADP Enrichment

CVE Program Container

Additional References

References