CVE-2013-5567

MediumCVSS 5.4/10Last modified Jun 16, 2026

Description

Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service (traffic loop and device crash) via a packet that triggers multiple matches, aka Bug ID CSCui45606.

Metrics

CVSS 2.0 5.4/10AV:N/AC:H/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5567Broken Link, Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34911Vendor Advisory
http://www.securityfocus.com/bid/68504Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030555Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/94445Third Party Advisory, VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5567Broken Link, Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34911Vendor Advisory
http://www.securityfocus.com/bid/68504Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030555Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/94445Third Party Advisory, VDB Entry

Timeline

Published: Jul 14, 2014
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-55687.1The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a de CVE-2013-55697.5SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec CVE-2013-55704.3Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to in CVE-2013-55715.9HMailServer 5.3.x and prior: Memory Corruption which could cause DOS CVE-2013-55723.5Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ld CVE-2013-55734.3Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web sc CVE-2013-55766.8administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote CVE-2013-55789.3Buffer overflow in the ToDot method in the WINGRAPHVIZLib.NEATO ActiveX control in WinGraphviz.dll in StarUML allows remote attackers to exe CVE-2013-55804.3The (1) Conn_StartLogin and (2) cb_Read_Resolver_Result functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeA CVE-2013-55827.8Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers t CVE-2013-55834.3Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary CVE-2013-55864.3Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or