CVE-2016-6432 Details
Description
A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker could exploit this vulnerability by sending a crafted NetBIOS packet in response to a NetBIOS probe sent by the ASA software. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or cause a reload of the affected system. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed and transparent firewall mode and in single or multiple context mode. This vulnerability can be triggered by IPv4 traffic.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-idfw | CVE | MitigationVendor Advisory |
| http://www.securityfocus.com/bid/93784 | CVE | Third Party AdvisoryVDB Entry |
| http://www.securitytracker.com/id/1037059 | CVE | |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-idfw | [email protected] | MitigationVendor Advisory |
| http://www.securityfocus.com/bid/93784 | [email protected] | Third Party AdvisoryVDB Entry |
| http://www.securitytracker.com/id/1037059 | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| cisco adaptive security appliance software | 8.4.0 8.4.2 8.4.2.1 8.4.2.8 8.4.3 8.4.3.8 8.4.3.9 8.4.4 8.4.4.1 8.4.4.3 8.4.4.5 8.4.4.9 8.4.5 8.4.5.6 8.4.6 8.4.7 8.4.7.3 8.4.7.15 8.4.7.22 8.4.7.23 8.4.7.26 8.4.7.28 8.4.7.29 8.5.1 8.5.1.1 8.5.1.6 8.5.1.7 8.5.1.14 8.5.1.17 8.5.1.18 8.5.1.19 8.5.1.21 8.5.1.24 8.6.1 8.6.1.1 8.6.1.2 8.6.1.5 8.6.1.10 8.6.1.12 8.6.1.13 8.6.1.14 8.6.1.17 8.7.1 8.7.1.1 8.7.1.3 8.7.1.4 8.7.1.7 8.7.1.8 8.7.1.11 8.7.1.13 8.7.1.16 8.7.1.17 9.0.1 9.0.2 9.0.2.10 9.0.3 9.0.3.6 9.0.3.8 9.0.4 9.0.4.1 9.0.4.5 9.0.4.7 9.0.4.17 9.0.4.20 9.0.4.24 9.0.4.26 9.0.4.29 9.0.4.33 9.0.4.35 9.0.4.37 9.1(7)4 9.1.1 9.1.1.4 9.1.2 9.1.2.8 9.1.3 9.1.3.2 9.1.4 9.1.4.5 9.1.5 9.1.5.10 9.1.5.12 9.1.5.15 9.1.5.21 9.1.6 9.1.6.1 9.1.6.4 9.1.6.6 9.1.6.8 9.1.6.10 9.2(0.0) 9.2(0.104) 9.2(3.1) 9.2.1 9.2.2 9.2.2.4 9.2.2.7 9.2.2.8 9.2.3 9.2.3.3 9.2.3.4 9.2.4 9.2.4.2 9.2.4.4 9.3(1.50) 9.3(1.105) 9.3(2.100) 9.3(2.243) 9.3.1 9.3.1.1 9.3.2 9.3.2.2 9.3.3 9.3.3.1 9.3.3.2 9.3.3.5 9.3.3.6 9.3.5 9.4.0.115 9.4.1 9.4.1.1 9.4.1.2 9.4.1.3 9.4.1.5 9.4.2 9.4.2.3 9.5.1 9.5.2 9.6.0 9.6.1 |
CPE
Remediation
| |
Change History
142 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 6, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 15, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Aug 11, 2023 | CPE Deprecation Remap | [email protected] |
| Oct 30, 2018 | CPE Deprecation Remap | [email protected] |
| Jul 29, 2017 | CVE Modified | [email protected] |
| Jan 27, 2017 | Reanalysis | [email protected] |
| Dec 23, 2016 | Modified Analysis | [email protected] |
| Nov 28, 2016 | CVE Modified | [email protected] |
| Oct 31, 2016 | Modified Analysis | [email protected] |
| Oct 28, 2016 | Initial Analysis | [email protected] |
| Oct 28, 2016 | CVE Translated | [email protected] |