CVE-2013-5567

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-14 · updated 2026-06-16
Weakness: CWE-400

Description

Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service (traffic loop and device crash) via a packet that triggers multiple matches, aka Bug ID CSCui45606.

Affected products

Cisco ASA Software: through 8.4\(6\)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5567
http://tools.cisco.com/security/center/viewAlert.x?alertId=34911
http://www.securityfocus.com/bid/68504
http://www.securitytracker.com/id/1030555
https://exchange.xforce.ibmcloud.com/vulnerabilities/94445
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5567
http://tools.cisco.com/security/center/viewAlert.x?alertId=34911
http://www.securityfocus.com/bid/68504
http://www.securitytracker.com/id/1030555
https://exchange.xforce.ibmcloud.com/vulnerabilities/94445

Get alerted when CVE-2013-5567 or the next vulnerability affects your stack