CVE:CVE-2010-2814
CNNVD:CNNVD-201008-063
Cisco ASA系列自适应安全设备是思科专门设计的解决方案，能够将最高的安全性和VPN服务与全新的自适应识别和防御(AIM)架构有机地结合在一起。
Cisco ASA 5500系列自适应安全设备和Cisco PIX 500系列安全设备中的传输层安全(TLS)实施存在未明漏洞。远程攻击者可以借助一连串的特制的TLS数据包(又名Bug ID CSCtf37506)导致服务拒绝(设备重载)。
solution:Upgrade cisco adaptive_security_appliance to a higher version than 7.2(3,7.2(4,7.2(5,8.0(2,8.0(3,8.0(4,8.0(5,8.1(1,8.1(2,8.2,8.2(1,8.2(2,8.3,and avoid the version 7.2(3),7.2(4),7.2(5),8.0(2),8.0(3),8.0(4),8.0(5),8.1(1),8.1(2),8.2,8.2(1),8.2(2),8.3; Upgrade cisco adaptive_security_appliance_software to a higher version than 7.2(1,7.2(1.22,7.2(2,7.2(2.5,7.2(2.7,7.2(2.8,7.2(2.10,7.2(2.14,7.2(2.15,7.2(2.16,7.2(2.17,7.2(2.19,7.2(2.48,8.0,and avoid the version 7.2(1),7.2(1.22),7.2(2),7.2(2.5),7.2(2.7),7.2(2.8),7.2(2.10),7.2(2.14),7.2(2.15),7.2(2.16),7.2(2.17),7.2(2.19),7.2(2.48),8.0; Upgrade cisco asa_5500 to a higher version than *; Upgrade cisco asa_5505 to a higher version than *; Upgrade cisco asa_5510 to a higher version than *; Upgrade cisco asa_5520 to a higher version than *; Upgrade cisco asa_5540 to a higher version than *; Upgrade cisco asa_5550 to a higher version than *; Upgrade cisco asa_5580 to a higher version than *; Upgrade cisco pix_500 to a higher version than *; Upgrade cisco pix_501 to a higher version than *; Upgrade cisco pix_506e to a higher version than *; Upgrade cisco pix_firewall_506 to a higher version than *; Upgrade cisco pix_firewall_515 to a higher version than *; Upgrade cisco pix_firewall_520 to a higher version than *; Upgrade cisco pix_firewall_525 to a higher version than *; Upgrade cisco pix_firewall_535 to a higher version than *