CVE-2015-6321 : Détail

CVE-2015-6321

0.56%V3
Network
2015-11-06
01h00 +00:00
2016-12-05
21h57 +00:00
Notifications pour un CVE
Restez informé de toutes modifications pour un CVE spécifique.
Gestion des notifications

Descriptions du CVE

Cisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) devices; before 9.1.0-032, 9.1.1 before 9.1.1-005, and 9.5.x before 9.5.0-025 on Content Security Management Appliance (SMA) devices; and before 7.7.0-725 and 8.x before 8.0.8-113 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug IDs CSCus79774, CSCus79777, and CSCzv95795.

Informations du CVE

Faiblesses connexes

CWE-ID Nom de la faiblesse Source
CWE-399 Category : Resource Management Errors
Weaknesses in this category are related to improper management of system resources.

Métriques

Métriques Score Gravité CVSS Vecteur Source
V2 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C nvd@nist.gov

EPSS

EPSS est un modèle de notation qui prédit la probabilité qu'une vulnérabilité soit exploitée.

Score EPSS

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Percentile EPSS

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Products Mentioned

Configuraton 0

Cisco>>Web_security_appliance >> Version 5.6.0-623

    Cisco>>Web_security_appliance >> Version 6.0.0-000

      Cisco>>Web_security_appliance >> Version 7.5.0-000

        Cisco>>Web_security_appliance >> Version 7.5.0-825

          Cisco>>Web_security_appliance >> Version 7.5.1-000

            Cisco>>Web_security_appliance >> Version 7.5.2-000

              Cisco>>Web_security_appliance >> Version 7.7.0-000

                Cisco>>Web_security_appliance >> Version 7.7.1-000

                  Cisco>>Web_security_appliance >> Version 8.0.0-000

                    Cisco>>Web_security_appliance >> Version 8.5.0.000

                      Configuraton 0

                      Cisco>>Content_security_management_appliance >> Version 7.8.0-328

                        Cisco>>Content_security_management_appliance >> Version 7.8.1-001

                          Cisco>>Content_security_management_appliance >> Version 7.9.0-201

                            Cisco>>Content_security_management_appliance >> Version 7.9.2-116

                              Cisco>>Content_security_management_appliance >> Version 8.0.1-031

                                Cisco>>Content_security_management_appliance >> Version 8.1.0-001

                                  Cisco>>Content_security_management_appliance >> Version 8.1.1-033

                                    Cisco>>Content_security_management_appliance >> Version 8.1.2-000

                                      Cisco>>Content_security_management_appliance >> Version 8.2.0-238

                                        Cisco>>Content_security_management_appliance >> Version 8.3.0-350

                                          Cisco>>Content_security_management_appliance >> Version 8.3.5-061

                                            Cisco>>Content_security_management_appliance >> Version 8.3.6-014

                                              Cisco>>Content_security_management_appliance >> Version 8.3.7-010

                                                Cisco>>Content_security_management_appliance >> Version 8.4.0-150

                                                  Cisco>>Content_security_management_appliance >> Version 9.0.0-073

                                                    Cisco>>Content_security_management_appliance >> Version 9.1.0-004

                                                      Configuraton 0

                                                      Cisco>>Email_security_appliance >> Version 7.6.1-000

                                                      Cisco>>Email_security_appliance >> Version 7.6.3-000

                                                      Cisco>>Email_security_appliance >> Version 7.7.0-000

                                                      Cisco>>Email_security_appliance >> Version 7.7.1-000

                                                      Cisco>>Email_security_appliance >> Version 7.8.0-311

                                                      Cisco>>Email_security_appliance >> Version 8.5.6-052

                                                      Cisco>>Email_security_appliance >> Version 8.6.0-011

                                                      Cisco>>Email_security_appliance >> Version 8.9.1-000

                                                      Cisco>>Email_security_appliance >> Version 8.9.2-032

                                                      Cisco>>Email_security_appliance >> Version 9.0.0-212

                                                      Cisco>>Email_security_appliance >> Version 9.0.5-000

                                                      Cisco>>Email_security_appliance >> Version 9.1.0-011

                                                      Cisco>>Email_security_appliance >> Version 9.4.4-000

                                                      Cisco>>Email_security_appliance >> Version 9.5.0-000

                                                      Références

                                                      http://www.securitytracker.com/id/1034060
                                                      Tags : vdb-entry, x_refsource_SECTRACK
                                                      http://www.securitytracker.com/id/1034061
                                                      Tags : vdb-entry, x_refsource_SECTRACK