====================================================================

                                 CERT-Renater

                    Note d'Information No. 2016/VULN090
_____________________________________________________________________

DATE                : 03/03/2016

HARDWARE PLATFORM(S): Cisco Web Security Appliance.

OPERATING SYSTEM(S): Cisco WSA Software.

======================================================================
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-wsa
_____________________________________________________________________

Cisco Security Advisory: Cisco Web Security Appliance HTTPS Packet
Processing Denial of Service Vulnerability

Advisory ID: cisco-sa-20160302-wsa

Revision 1.0

Published: 2016 March 2 16:00  GMT
+---------------------------------------------------------------------

Summary
=======

A vulnerability in the web proxy framework of the Cisco Web Security
Appliance (WSA) could allow an unauthenticated, remote attacker with
the ability to negotiate a secure connection from within the trusted
network to cause a denial of service (DoS) condition on the affected
device.

The vulnerability is due to incorrect processing of HTTPS packets. An
attacker could exploit this vulnerability by sending a malformed HTTPS
request packet through the affected device. A successful exploit could
allow an attacker to create a DoS condition, causing all requests
traversing the WSA to be dropped. The condition is temporary and no
manual intervention is required to restore functionality.

Cisco has released software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are not available.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-wsa


==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================