All vulnerabilities

Servers and applications

CVE-2022-20927

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this…

Severity
Medium 6.5
Published
15 Nov 2022
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • Version 9.15.1.21
  • Version 9.15.1.17
  • Version 9.15.1.16
  • Version 9.15.1.15
All 34 release lines
  • Version 9.13.1
  • Version 9.13.1.2
  • Version 9.13.1.7
  • Version 9.13.1.10
  • Version 9.13.1.12
  • Version 9.13.1.13
  • Version 9.13.1.16
  • Version 9.13.1.19
  • Version 9.13.1.21
  • Version 9.14.1
  • Version 9.14.1.10
  • Version 9.14.1.15
  • Version 9.14.1.19
  • Version 9.14.1.30
  • Version 9.14.2
  • Version 9.14.2.4
  • Version 9.14.2.8
  • Version 9.14.2.13
  • Version 9.14.2.15
  • Version 9.14.3
  • Version 9.14.3.1
  • Version 9.14.3.9
  • Version 9.14.3.11
  • Version 9.14.3.13
  • Version 9.14.3.15
  • Version 9.14.3.18
  • Version 9.15.1
  • Version 9.15.1.1
  • Version 9.15.1.7
  • Version 9.15.1.10
  • Version 9.15.1.15
  • Version 9.15.1.16
  • Version 9.15.1.17
  • Version 9.15.1.21

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-20927
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-20927