Number: AV16-066
Date: 21 April 2016
Purpose
The purpose of this advisory is to bring attention to multiple Cisco security advisories.
Assessment
Cisco released multiple security updates to address critical and high vulnerabilities in the following software:
Critical
- Cisco Wireless LAN Controller HTTP Parsing Denial of Service Vulnerability
High
- Multiple Cisco Products libSRTP Denial of Service Vulnerability
- Cisco Wireless LAN Controller Management Interface Denial of Service Vulnerability
- Cisco Adaptive Security Appliance Software DHCPv6 Relay Denial of Service Vulnerability
- Cisco Wireless LAN Controller Denial of Service Vulnerability
CVE Reference: CVE-2016-1363, CVE-2015-6360, CVE-2016-1362, CVE-2016-1367, CVE-2016-1364
Suggested action
CCIRC recommends that system administrators test and deploy the vendor-released updates to affected applications accordingly.
References
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-htrd
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-libsrtp
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-wlc
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-asa-dhcpv6
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-bdos