=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN268
_____________________________________________________________________

DATE                : 27/06/2013

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Cisco ASA Next-Generation Firewall.

======================================================================
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-ngfw
______________________________________________________________________

Cisco Security Advisory: Cisco ASA Next-Generation Firewall Fragmented
Traffic Denial of Service Vulnerability

Advisory ID: cisco-sa-20130626-ngfw

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-20130626-ngfw

Revision 1.0

For Public Release 2013 June 26 16:00  UTC (GMT)

+------------------------------------------------------------------------------

Summary
=======

Cisco ASA Next-Generation Firewall (NGFW) Services contains a Fragmented
Traffic Denial of Service (DoS) vulnerability.

Successful exploitation of this vulnerability on the Cisco ASA NGFW
could cause the device to reload or stop processing user traffic that
has been redirected by the parent Cisco ASA to the ASA NGFW module for
further inspection.

There are no workarounds for this vulnerability, but mitigations are
available.

Cisco has released free software updates that address this
vulnerability. This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-ngfw


======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================