CVE-2015-4278 Denial of service in n/a
Remote attackers can cause email reception outages on Cisco ESA devices by sending malformed DMARC policy data via DNS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-4278?
CVE-2015-4278 is a medium-severity denial of service vulnerability in n/a, published on 16 Jul 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service (per-domain e-mail reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806.
Weakness: CWE-20
Which versions are affected by CVE-2015-4278?
It affects 1 product.
Products include Cisco Email Security Appliance Firmware.
How do I fix CVE-2015-4278?
No fix has been published for CVE-2015-4278 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-4278 being exploited?
There is no known exploitation of CVE-2015-4278 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2016-6406 Auth bypass in n/a
- CVE-2018-15453 Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability
- CVE-2017-6671 Security feature bypass in Cisco Email Security Appliance
- CVE-2016-6458 Security feature bypass in Cisco AsyncOS 10.0.0-125 and 9.7.1-066
- CVE-2019-12706 Cisco Email Security Appliance Filter Bypass Vulnerability
Sources
Also known as GHSA-j467-jvch-4wxp.