CVE-2008-3817 : Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Secu

Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via an unspecified sequence of packets, related to the "initialization code for the hardware crypto accelerator."

Published 2008-10-23 22:00:01

Updated 2025-04-09 00:30:58

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2008-3817

Cisco » Pix Security Appliance » Version: 8.0
cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*
Matching versions
Cisco » Pix Security Appliance » Version: 8.1
cpe:2.3:h:cisco:pix_security_appliance:8.1:*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance 5500 Series
cpe:2.3:h:cisco:adaptive_security_appliance_5500_series:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-3817

EPSS FAQ

1.48%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-3817

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2008-3817

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-3817

Jump to

Vulnerability Details : CVE-2008-3817

Products affected by CVE-2008-3817

Exploit prediction scoring system (EPSS) score for CVE-2008-3817

CVSS scores for CVE-2008-3817

CWE ids for CVE-2008-3817

References for CVE-2008-3817