Cisco Releases Security Updates
Cisco has released updates to address several high-impact vulnerabilities affecting multiple products. These and other lower-impact vulnerabilities are listed at Cisco Security Advisories and Alerts. A remote attacker could exploit one of the high-impact vulnerabilities to cause a denial-of-service condition.
Users and administrators are encouraged to review the following Cisco Security Advisories and apply the necessary updates:
- ASA Software DNS Denial-of-Service Vulnerability cisco-sa-20170419-asa-dns
- ASA Software IPsec Denial-of-Service Vulnerability cisco-sa-20170419-asa-ipsec
- ASA Software SSL/TLS Denial-of-Service Vulnerability cisco-sa-20170419-asa-tls
- ASA Software Internet Key Exchange Version 1 XAUTH Denial-of-Service Vulnerability cisco-sa-20170419-asa-xauth
- IOS and IOS XE Software EnergyWise Denial-of-Service Vulnerabilities cisco-sa-20170419-energywise
- Firepower Detection Engine Pragmatic General Multicast Protocol Decoding Denial-of-Service Vulnerability cisco-sa-20170419-fpsnort
- Unified Communications Manager Denial-of-Service Vulnerability cisco-sa-20170419-ucm