CVE-2017-12256 Denial of service in Cisco Wide Area Application Services
Unauthenticated remote attackers can cause a denial-of-service condition on Cisco WAAS appliances by directing clients to access corrupted files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-12256?
CVE-2017-12256 is a medium-severity denial of service vulnerability in Cisco Wide Area Application Services, published on 5 Oct 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition on an affected device. The vulnerability is due to certain file-handling inefficiencies of the affected system. An attacker could exploit this vulnerability by directing client systems to access a corrupted file that the client systems cannot decompress correctly. A successful exploit could allow the attacker to cause the affected device to crash or hang unexpectedly and result in a DoS condition that may require manual intervention to regain normal operating conditions. Cisco Bug IDs: CSCve82472.
Weakness: CWE-399
Which versions are affected by CVE-2017-12256?
It affects 1 product.
Products include Cisco Wide Area Application Services.
How do I fix CVE-2017-12256?
No fix has been published for CVE-2017-12256 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2017-12256 being exploited?
There is no known exploitation of CVE-2017-12256 in the wild and no public exploit code.
Other vulnerabilities in Cisco Wide Area Application Services
Sources
Also known as GHSA-7fgg-2gf2-8rv5.