北京时间4月14日，思科在其官网公布了Cisco

ASA DNS内存耗尽的高危漏洞。1）漏洞描述

Cisco Adaptive Security Appliance是一款自适应安全设备,可提供安全和VPN服务的模块。

Cisco ASA Software的DNS代码存在安全漏洞，可使未经身份验证的远程攻击者利用此漏洞耗尽可用内存，导致系统崩溃。

2）影响产品

Cisco Adaptive Security Appliance (ASA) Software 7.2(

Cisco Adaptive Security Appliance (ASA) Software

8.2(Cisco Adaptive Security Appliance (ASA) Software

8.3(Cisco Adaptive Security Appliance (ASA) Software

8.4(Cisco Adaptive Security Appliance (ASA) Software

8.5(Cisco Adaptive Security Appliance (ASA) Software

8.6(Cisco Adaptive Security Appliance (ASA) Software

8.7(

3）处置建议

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-asa