Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
Cisco fixed an EIGRP flaw in Secure Firewall ASA/FTD software letting unauthenticated adjacent attackers trigger memory leaks and unexpected device reloads.
A vulnerability in the EIGRP implementation of Cisco Secure Firewall ASA and FTD Software stems from improper resource management when handling EIGRP update messages. An unauthenticated, adjacent attacker can send crafted EIGRP updates at a high rate to cause a memory leak that eventually reloads the device, creating a denial of service. Cisco has released software updates addressing the issue.
28