CVE-2008-3817
Last modified
CVE-2008-3817 is a vulnerability of currently unknown severity. Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via an unspecified sequence of packets, related to the "initialization code for the hardware crypto accelerator.". EPSS estimates a 1.98% chance of exploitation in the next 30 days.
Description
Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via an unspecified sequence of packets, related to the "initialization code for the hardware crypto accelerator."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Adaptive Security Appliance 5500 Series | All versions |
| Cisco | Pix Security Appliance | 8.0 |
| Cisco | Pix Security Appliance | 8.1 |
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-3817?
How severe is CVE-2008-3817?
How do I fix CVE-2008-3817?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-3811Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protoc…
- CVE-2008-3812Cisco IOS 12.4, when IOS firewall Application Inspection Con…
- CVE-2008-3813Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when t…
- CVE-2008-3814Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES…
- CVE-2008-3815Unspecified vulnerability in Cisco Adaptive Security Applian…
- CVE-2008-3816Unspecified vulnerability in Cisco Adaptive Security Applian…
- CVE-2008-3818Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 1…
- CVE-2008-3819dnsserver in Cisco Application Control Engine Global Site Se…
- CVE-2008-3820Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco …
- CVE-2008-3821Multiple cross-site scripting (XSS) vulnerabilities in the H…
- CVE-2008-3822Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2008-3823Cross-site scripting (XSS) vulnerability in MIME/MIME/Conten…
Are you affected by CVE-2008-3817?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST