UpHeron
All vulnerabilities

Servers and applications

CVE-2018-0101

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device. An attacker could…

Severity
Critical 10.0
Published
29 Jan 2018
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.2.4.27, 9.4.4.16, 9.6.4.3, 9.7.1.21, 9.8.2.20, 9.9.1.2
Exploit chance
87% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • From 9.2.0 before 9.2.4.27
  • From 9.3.0 before 9.4.4.16
  • From 9.5.0 before 9.6.4.3
  • From 9.7.0 before 9.7.1.21
  • From 9.8.0 before 9.8.2.20
  • From 9.9.0 before 9.9.1.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-0101
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-0101