CVE-2015-0654 – Race condition in the TLS implementation in MainApp in the management int

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0654

Reference (s):

• CISCO:20150311 Cisco Intrusion Prevention System MainApp Secure Socket Layer Denial of Service Vulnerability
• URL: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-ips
• SECTRACK:1031908
• URL: http://www.securitytracker.com/id/1031908