| Package | Affected versions | Patched versions |
|---|---|---|
| anyconnect secure mobility client | = 4.9.00086= 4.9.01095= 4.9.02028= 4.9.03047= 4.9.03049= 4.9.04043= 4.9.04053= 4.9.05042= 4.9.06037 | |
| secure client | = 4.10.00093= 4.10.01075= 4.10.02086= 4.10.03104= 4.10.04065= 4.10.04071= 4.10.05085= 4.10.05095= 4.10.05111= 4.10.06079= 4.10.06090= 4.10.07061= 4.10.07062= 4.10.07073= 4.10.08025= 4.10.08029= 5.0.00238= 5.0.00529= 5.0.00556= 5.0.01242= 5.0.02075= 5.0.03072= 5.0.03076= 5.0.04032= 5.0.05040= 5.1.0.136= 5.1.1.42= 5.1.2.42= 5.1.3.62 |
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software. Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free