How to Buy
This script is Copyright (C) 2014 Tenable Network Security, Inc.
The remote device is missing a vendor-supplied security patch.
The remote Cisco Adaptive Security Appliance (ASA) Software contains a
vulnerability that could allow an unauthenticated, remote attacker to
cause a memory leak which can be exploited to create a denial of
The vulnerability is due to improper handling of Session Initiation
Protocol (SIP) packets. An attacker could exploit this vulnerability
via specially crafted SIP packets.
See also :
Apply the relevant patch referenced in Cisco Bug Id CSCuf67469.
Alternatively, the vendor has provided a workaround that involves
disabling SIP inspection on the affected device.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.3
Public Exploit Available : true
Nessus Plugin ID: 73827 ()
Bugtraq ID: 67036
CVE ID: CVE-2014-2154
Get Nessus Professional to scan unlimited IPs, run compliance checks & more
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.