PAN Notification: Application and Threat Content Update

Dear Teneo Customer,

If you have ASA's you will have heard the recent news that a vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code.

The vulnerability is due to a buffer overflow in the affected code area. An attacker could exploit this vulnerability by sending crafted UDP packets to the affected system. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.

The Solution

Palo Alto Networks have released ​an emergency content update to add coverage for the recent Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability, CVE-2016-1287. Customers are advised to upgrade all devices to the latest version of Content Apps and Threats and review policies to ensure desired actions are configured on all security policies.

Modified Decoders (1)

New Vulnerability Signatures (2)

What if I need help?
If you have any questions regarding this notification please don’t hesitate to reach out to us, or visit our support portal. 

You can contact us on our 24 x 7 support number or mail us support@teneo.net

EMEA:  +44 (0)845 299 0623
US:  +1 877 836 3610
APAC:  +61 1800 765 389

Thanks

Teneo Support