Cisco Multiple Security Advisories

Number: AV16-084
Date: 19 May 2016

Purpose

The purpose of this advisory is to bring attention to multiple Cisco security advisories.

Cisco released multiple security updates to address critical and high vulnerabilities in the following software:

Critical

High

Cisco Web Security Appliance HTTP POST Denial of Service Vulnerability
Cisco Web Security Appliance Cached Range Request Denial of Service Vulnerability
Cisco Web Security Appliance Connection Denial of Service Vulnerability
Cisco Web Security Appliance HTTP Length Denial of Service Vulnerability

CVE Reference: CVE-2016-1287, CVE-2016-1380, CVE-2016-1381, CVE-2016-1383, CVE-2016-1382

CCIRC recommends that system administrators test and deploy the vendor-released updates to affected applications accordingly.