CVE-2008-2734: Cisco Adaptive Security Appliance 5500

High severity, CVSS 7.1. EPSS: 2.8% chance of exploitation in the next 30 days.

Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VPN endpoint, allows remote attackers to cause a denial of service (memory consumption and VPN hang) via a crafted SSL or HTTP packet, aka Bug ID CSCso66472.

Affected products

• Cisco Adaptive Security Appliance 5500: version 8.0 only; version 8.1 only

Published 2008-09-04. Last modified 2026-06-16.