CVE-2023-20042

Summary

CVE-2023-20042 is a denial-of-service vulnerability affecting Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software. An unauthenticated attacker can exploit this issue by sending crafted SSL/TLS traffic, leading to session handler leaks and depletion of the available session handler pool. This implementation error in SSL/TLS session handling process increases the probability of this condition, ultimately causing a denial-of-service on the affected device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.