Cisco Releases Security Updates

Cisco has released updates to address several high-impact vulnerabilities affecting multiple products. These and other lower-impact vulnerabilities are listed at Cisco Security Advisories and Alerts. A remote attacker could exploit one of the high-impact vulnerabilities to cause a denial-of-service condition.

Users and administrators are encouraged to review the following Cisco Security Advisories and apply the necessary updates:

• ASA Software DNS Denial-of-Service Vulnerability cisco-sa-20170419-asa-dns
• ASA Software IPsec Denial-of-Service Vulnerability cisco-sa-20170419-asa-ipsec
• ASA Software SSL/TLS Denial-of-Service Vulnerability cisco-sa-20170419-asa-tls
• ASA Software Internet Key Exchange Version 1 XAUTH Denial-of-Service Vulnerability cisco-sa-20170419-asa-xauth
• IOS and IOS XE Software EnergyWise Denial-of-Service Vulnerabilities cisco-sa-20170419-energywise
• Firepower Detection Engine Pragmatic General Multicast Protocol Decoding Denial-of-Service Vulnerability cisco-sa-20170419-fpsnort
• Unified Communications Manager Denial-of-Service Vulnerability cisco-sa-20170419-ucm