5
CVSSv2

CVE-2015-0742

Published: 21/05/2015 Updated: 15/08/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), and 100.14(1.1) does not properly implement multicast-forwarding registration, which allows remote malicious users to cause a denial of service (forwarding outage) via a crafted multicast packet, aka Bug ID CSCus74398.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco adaptive security appliance software 100.13\\(0.21\\)

cisco adaptive security appliance software 100.13\\(20.3\\)

cisco adaptive security appliance software 100.13\\(21.9\\)

cisco adaptive security appliance software 9.4\\(0.115\\)

cisco adaptive security appliance software 9.2\\(3.4\\)

cisco adaptive security appliance software 9.2\\(3.1\\)

cisco adaptive security appliance software 9.3\\(2.100\\)

cisco adaptive security appliance software 9.2\\(0.104\\)

cisco adaptive security appliance software 9.2\\(0.0\\)

cisco adaptive security appliance software 9.3\\(1.105\\)

cisco adaptive security appliance software 100.14\\(1.1\\)

Vendor Advisories

A vulnerability in the Protocol Independent Multicast (PIM) application of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to disrupt the multicast traffic forwarding on the affected device via a denial-of-service (DoS) attack The vulnerability is due to an inconsistency in how the PIM registration is i ...