CSCwc67687

ASA HA failover triggers HTTP server restart failure and ASDM outage

CSCwd88641

Deployment changes to push VDB lite package based on Device model and snort engine

CSCwe33819

Snort2 ENH: Use a common pattern matcher list for CN and SNI patterns in apps

CSCwi90040

Cisco ASA and FTD Software Command Injection Vulnerability

CSCwi98284

Cisco ASA and FTD Software Persistent Local Code Execution Vulnerability

CSCwj10955

Cisco ASA and FTD Software Web Services Denial of Service Vulnerability

CSCvk00122

FMC Recurring Scheduled task created, task does not run on specified time - Tools > Scheduling

CSCvq29993

FPR2100 ONLY - PERMANENT block leak of size 9472 and 1550 memory blocks & blackholes traffic

CSCvr33586

FPR1010 - Add temperature/warnings for SSD when thresholds are exceeded

CSCvs95188

FXOS FTD Multi Instance CPU cores shared between different instances

CSCvt25917

FTD CLI - Fail to display the disabled local user and cannot enable back

CSCvt35774

Missing rotate for SNMP log file causes high disk usage

CSCvt44295

Snort core generated during policy deployment

CSCvt64238

FXOS pktmgr Rx Drops counter keeps increasing in LACP Port-Channel

CSCvt66186

ASA on FP2100 keeps generating ASA-4-199016 (9.13.1, appliance mode)

CSCvt68055

snmpd is respawning frequently on fxos for FP21xx device

CSCvu65654

Permission denied error on 4100 platform when radius user establishes an SSH session.

CSCvu84127

Firepower may reboot for no apparent reason

CSCvu97112

SNMP polling stopped working on active device in HA

CSCvv24647

FTD 2100 - SNMP: incorrect values returned for Ethernet statistics polling

CSCvv36788

MsgLayer[PID]: Error : Msglyr::ZMQWrapper::registerSender() : Failed to bind ZeroMQ Socket

CSCvv52349

No utility to handle XFS corruption on 2100/1000 series Firepower devices

CSCvv54829

FPR device does not recognize USB/pendrive that exeeds 8GB

CSCvv74658

FTD/ASA creates coredump file with "!" character in filename (zmq changes (fxos) for CSCvv40406 )

CSCvw05392

Message appearing constantly on diagnostic-cli

CSCvw15359

KP fxos snmp has uninit strings for entPhysicalSerialNum,entPhysicalAssetID on EPM index

CSCvw16165

Firepower 1010 Series stops passing traffic when a member of the port-channel is down

CSCvw29647

FTD: NAS-IP-Address:0.0.0.0 in Radius Request packet as network interface for aaa-server not defined

CSCvw48829

Timezone in "show clock" is different from which in "show run clock"

CSCvw72260

ASA upgrade failed with: "CSP directory does not exist - STOP_FAILED Application_Not_Found"

CSCvw90634

FP2100 ASA - 1 Gbps SFP in network module down/down after upgrade to 9.15.1.1

CSCvw90923

WR6, WR8 and LTS18 commit id update in CCM layer (sprint 101, seq 4)

CSCvw93159

Firepower 2100: ASA/FTD generates message "Local disk 2 missing on server 1/1"

CSCvw94160

CIAM: openssl CVE-2020-1971

CSCvw97256

Need handling of rmu read failure to ignore link state update when link state API read fails

CSCvw98315

FXOS reporting old FTD version after FTD upgrade to 6.7.0

CSCvx06920

WR6, WR8 and LTS18 commit id update in CCM layer (sprint 103, seq 5)

CSCvx16700

FXOS clock sync issue during blade boot up due to "MIO DID NOT RESPOND TO FORCED TIME SYNC"

CSCvx24207

FQDN Object Containing IPv4 and IPv6 Addresses Only Install IPv6 Entries

CSCvx29429

ma_ctx*.log consuming high diskspace on FPR4100/FPR9300 despite the fix for CSCvx07389

CSCvx33904

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation

CSCvx47550

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 105, seq 6)

CSCvx59252

FXOS is not rotating log files for management interface

CSCvx66329

FTD Hotfix Cisco_FTD_SSP_FP2K_Hotfix_O installation fails on script 000_start/125_verify_bundle.sh

CSCvx67468

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 107, seq 7)

CSCvx73164

Lasso SAML Implementation Vulnerability Affecting Cisco Products: June 2021

CSCvx89827

Not able to set Bangkok time zone in FPR 2110

CSCvx98807

WR6, and WR8 commit id update in CCM layer(sprint 109, seq 9)

CSCvy02448

Time sync do not work correctly for ASA on FPFPR2100 series platform

CSCvy03045

Failure accessing FXOS with connect fxos admin from Multi-Context ASA if admin context is changed

CSCvy08798

LTS18 commit id update in CCM layer(sprint 110, seq 10)

CSCvy10789

FTD 2110 ascii characters are disallowed in LDAP password

CSCvy12991

Chassis local date and time may drift back to midnight Jan 1 2015 after reboot

CSCvy26511

Tune unmanaged disk alert thresholds for low end platforms

CSCvy33879

FTD: repair_users.pl creates rogue .firstboot file that causes FTD reboot failure

CSCvy34333

When ASA upgrade fails, version status is desynched between platform and application

CSCvy35948

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 111, seq 11)

CSCvy39791

Lina traceback and core file size is beyond 40G and compression fails.

CSCvy40482

9.14MR3: snmpwalk got failed with [Errno 146] Connection refused error.

CSCvy63463

Error deleting users due to special characters

CSCvy64145

WR6 and WR8 commit id update in CCM layer(sprint 113, seq 12)

CSCvy65178

Need dedicated Rx rings for to the box BGP traffic on Firepower platform

CSCvy86817

Cruz ASIC CLU filter has the incorrect src/dst IP subnet when a custom CCL IP subnet is set

CSCvy89648

ma_ctx files with '.backup' extension seen after applying the workaround for CSCvx29429

CSCvy89658

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 114, seq 13)

CSCvy96698

Resolve spurious status actions checking speed values twice in FXOS portmgr

CSCvy98027

Application interface down whereas physical interface Up on FXOS

CSCvz05767

FP-1010 HA link goes down or New hosts unable to connect to the device

CSCvz06652

snmpd corefiles noticed on SNMP longevity setup

CSCvz07004

SNORT2: FTD is performing Full proxy even when SSL rule has DND action.

CSCvz12494

In FPR2100,after power off/on,the fxos version is mismatched with asa version.

CSCvz15676

In Firepower 1010 device, after upgrading ASA app, device going for fail safe mode

CSCvz15755

FTD - Port-channel not coming up after upgrade and may generate core file

CSCvz22668

FMC backup restoration may fail due to VMS database restoration failure

CSCvz34289

In some cases transition to lightweight proxy doesn't work for Do Not Decrypt flows

CSCvz39455

ASA: Unable to perform SNMPv3 walk/polling after a software upgrade on 21xx

CSCvz41551

FP2100: ASA/FTD with threat-detection statistics may traceback and reload in Thread Name 'lina'

CSCvz53884

SNMP OID HOST-RESOURCES-MIB (1.3.6.1.2.1.25) does not exist on FMC

CSCvz55140

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 117, seq 17)

CSCvz61456

Software upgrade on ASA application may failure without obvious reasons

CSCvz61689

Port-channel member interfaces are lost and status is down after software upgrade

CSCvz66474

Snmpd core files generated on FTD

CSCvz67386

Get Snort status and version using Linux commands instead of the pmtool command

CSCvz71596

"Number of interfaces on Active and Standby are not consistent" should trigger warning syslog

CSCvz78816

ASA disconnects the ssh, https session using of Active IP address and Standby MAC address after FO

CSCvz83432

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 121, seq 18)

CSCvz84733

LACP packets through inline-set are silently dropped

CSCvz85913

ASN.1 strings are represented internally within OpenSSL as an ASN1_STR for CISCO-SSL-1.0.2

CSCwa00038

Disk corruption occurs when /mnt/disk0 partition is full and blade is rebooted

CSCwa04262

Cisco ASA Software SSL VPN Client-Side Request Smuggling Vulnerability via "/"URI

CSCwa05385

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 124, seq 19)

CSCwa20758

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 124, seq 20)

CSCwa32286

WR6, WR8 and LTS18 commit id update in CCM layer (sprint 125, seq 21)

CSCwa36535

Standby unit failed to join failover due to large config size.

CSCwa42350

ASA installation/upgrade fails due to internal error "Available resources not updated by module"

CSCwa43311

Snort blocking and dropping packet, with bigger size(1G) file download

CSCwa43475

ASA SNMPd traceback in netsnmp_subtree_split

CSCwa46905

WM 1010 speed/duplex setting is not getting effect and causes unstable interface

CSCwa47737

ASA/FTD may hit a watchdog traceback related to snmp config writing

CSCwa48169

ASA/FTD traceback and reload on netsnmp_handler_check_cache function

CSCwa51241

Switch detected unknown MAC address from FPR1140 Management Interface

CSCwa52342

FTD 6.6.4 SSL policy reducing the download speed

CSCwa55562

Different CG-NAT port-block allocated for same source IP causing per-host PAT port block exhaustion

CSCwa59907

LINA observed traceback on thread name "snmp_client_callback_thread"

CSCwa69009

Troubleshoot is generating large amount of logs during FTD multi instance Ha pair upgrade

CSCwa72929

SNMPv3 polling may fail using privacy algorithms AES192/AES256

CSCwa76822

Tune throttling flow control on syslog-ng destinations

CSCwa79676

FPR1010 in HA Printing Broadcast Storm Alerts for Multiple Interfaces

CSCwb01633

FXOS misses logs to diagnose root cause of module show-tech file generation failure

CSCwb01983

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwb01990

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwb01995

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwb02018

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwb02026

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwb05291

Cisco ASDM and ASA Software Client-side Arbitrary Code Execution Vulnerability

CSCwb13294

WR8, LTS18 and LTS21 commit id update in CCM layer (Seq 25)

CSCwb17206

FTD Multi Instance Clustering: Data nodes unable to join with RPC_SYSTEMERROR messages

CSCwb33184

Memory leak in MessageService causes UI slowness

CSCwb37737

FTD Syncd.pl memory leak causes OOM event resulting in FMC registration failure

CSCwb41854

Cisco FTD Software and Cisco FXOS Software Command Injection Vulnerability

CSCwb46949

LTS18 commit id update in CCM layer (seq 27)

CSCwb61901

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwb61908

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwb74357

FXOS is not rotating log files for partition opt_cisco_platform_logs

CSCwb78971

Fatal error: Upgrade Failed: Invalid password: A blank or masked password is not allowed

CSCwb80192

WR6, WR8 commit id update in CCM layer(Seq 30)

CSCwb88587

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwb89963

ASA Traceback & reload in thread name: Datapath

CSCwb92937

Error 403: Forbidden when expanding in view group objects

CSCwb93914

Cisco ASA Software and FTD Software Web Services Interface Denial of Service Vulnerability

CSCwc01225

FTD unable to join on HA due state progression failed due to APP SYNC timeout

CSCwc02133

Cisco FTD Software and Cisco FXOS Software Command Injection Vulnerability

CSCwc03507

Constant no-buffer drops on Internal Data interfaces despite little evidence of CPU hog

CSCwc08676

WR6, WR8, LTS18 and LTS21 commit id update in CCM layer (Seq 32)

CSCwc09065

FTD 6.6 HA failed due to APP SYNC timeout due to ConcurrentModificationException

CSCwc10037

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCwc10792

ASA/FTD IPSEC debugs missing reason for change of peer address and timer delete

CSCwc13017

FTD/ASA traceback and reload at at ../inspect/proxy.h:439

CSCwc25207

WR6, WR8, LTS18 and LTS21 commit id update in CCM layer (Seq 33)

CSCwc26648

ASA/FTD Traceback and Reload in Thread name Lina or Datatath

CSCwc28532

9344 Block leak due to fragmented GRE traffic over inline-set interface inner-flow processing

CSCwc28806

ASA Traceback and Reload on process name Lina

CSCwc28854

Incorrect IF-MIB response when failover is configured on multiple contexts

CSCwc32246

NAT64 translates all IPv6 Address to 0.0.0.0/0 when object subnet 0.0.0.0 0.0.0.0 is used

CSCwc35969

cannot add IP from event to global lists (block or do-not-block) if similar IP is already on list

CSCwc36905

ASA traceback and reload due to "Heap memory corrupted at slib_malloc.c

CSCwc36950

ASA/SFR service card failure due to operation timed out getting CriticalStatus from PM.

CSCwc38567

ASA/FTD may traceback and reload while executing SCH code

CSCwc41661

FTD Multiple log files with zero-byte size due to logrotate issues.

CSCwc44289

FTD - Traceback and reload when performing IPv4 <> IPv6 NAT translations

CSCwc45108

ASA/FTD: GTP inspection causing 9344 sized blocks leak

CSCwc45397

ASA HA - Restore in primary not remove new interface configuration done after backup

CSCwc46569

WR8, LTS18 and LTS21 commit id update in CCM layer (Seq 34)

CSCwc48375

Inbound IPSEC SA stuck inactive - many inbound SPIs for one outbound SPI in "show crypto ipsec sa"

CSCwc49095

ASA/FTD 2100 platform traceback and reload when fragments are coalesced and sent to PDTS

CSCwc50887

FTD - Traceback and reload on NAT IPv4<>IPv6 for UDP flow redirected over CCL link

CSCwc51326

FXOS-based Firepower platform showing 'no buffer' drops despite high values for RX ring watermarks

CSCwc52351

ASA/FTD Cluster Split Brain due to NAT with "any" and Global IP/range matching broadcast IP

CSCwc53280

ASA parser accepts incomplete network statement under OSPF process and is present in show run

CSCwc54984

IKEv2 rekey - Responding Invalid SPI for the new SPI received right after Create_Child_SA response

CSCwc60037

ASA fails to rekey with IPSEC ERROR: Failed to allocate an outbound hardware context

CSCwc60907

WR6, WR8, LTS18 and LTS21 commit id update in CCM layer (Seq 35)

CSCwc61912

ASA/FTD OSPFv3 does not generate messages Type 8 LSA for IPv6

CSCwc62384

Vulnerabilities on Cisco FTD Captive Portal on TCP port 885

CSCwc66757

ASA/FTD may traceback and reload in Thread Name 'lina'

CSCwc67886

ASA/FTD may traceback and reload in Thread Name 'lina_inotify_file_monitor_thread'

CSCwc68969

SSL policy is blocking certain websites using SFR module

CSCwc72155

ASA/FTD Traceback and reload on function "snp_cluster_trans_allocb"

CSCwc72284

TACACS Accounting includes an incorrect IPv6 address of the client

CSCwc73224

Call home configuration on standby device is lost after reload

CSCwc74103

ASA/FTD may traceback and reload in Thread Name 'DATAPATH-11-32591'

CSCwc79366

During the deployment time, device got stuck processing the config request.

CSCwc79520

Snort process may trace back in ssl_debug_log_config and generate core file

CSCwc81184

ASA/FTD traceback and reload caused by SNMP process failure

CSCwc81960

Unable to configure 'match ip address' under route-map when using object-group in access list

CSCwc88897

ASA traceback and reload due to null pointer in Umbrella after modifying DNS inspection policy

CSCwc90091

ASA 9.12(4)47 with user-statistics, will affects the "policy-server xxxx global" visibility.

CSCwc93166

Using write standby in a user context leaves secondary firewall license status in an invalid state

CSCwc94501

ASA/FTD tracebacks due to ctm_n5 resets

CSCwc96805

traceback and reload due to tcp intercept stat in thread unicorn

CSCwd00386

ASA/FTD may traceback and reload when clearing the configration due to "snp_clear_acl_log_flow_all"

CSCwd00778

ifAdminStatus output is abnormal via snmp polling

CSCwd03731

FPR4110 FTD upgrade from 6.4.0.4 to 7.0.x fails at 901_reapply_sensor_policy.pl

CSCwd07558

Access Control Policy Deployments failing after upgrading to 7.0.4 on SFR Managed by ASDM

CSCwd11303

ASA might generate traceback in ikev2 process and reload

CSCwd11855

ASA/FTD may traceback and reload in Thread Name 'ikev2_fo_event'

CSCwd11963

Error message seen in the log "Error operation timed out getting CriticalStatus from PM."

CSCwd26867

Device should not move to Active state once Reboot is triggered

CSCwd30977

FMC deleted some access-rules due to an incorrect delta generated during the policy deployment.

CSCum03297

MAXHOG timestamp is not shown in 'show processes cpu-hog' output

CSCvc57575

ISIS:Invalid ISIS debugs displayed while deleting context.

CSCvf89237

Evaluate unicorn expat for CVE-2017-9233

CSCvi58484

Cluster: ping sourced from FTD/ASA to external IPs may if reply lands on different cluster unit

CSCvk40714

Unable to configure SSH option for Remote Storage

CSCvk62945

ASA: Syslog for Route Add/Delete

CSCvo77184

VMware ASAv should default to vmxnet3, not e1000

CSCvq29993

FPR2100 ONLY - PERMANENT block leak of size 80, 256, and 1550 memory blocks & blackholes traffic

CSCvr33586

FPR1010 - Add temperature/warnings for SSD when thresholds are exceeded

CSCvs33392

Known Key SSL decryption and connections can fail when servers are using unsupported TLS options

CSCvs42388

Gratuitous logging of string: "Memory stats information for preprocessor is NULL"

CSCvs63863

Firepower 2100: Memory tracking shows empty call stacks

CSCvt15348

ASA show processes cpu-usage output is misleading on multi-core platforms

CSCvt67167

Data Unit traceback and reload without traffic at Thread Name :"logger"

CSCvu14647

Unable to stop config database error during FMC HA sync

CSCvu18510

MonetDB's eventdb crash causes loss of connection events on FMC

CSCvu23149

Backup generation in FMC fails due to corrupt SID_GID_ORD index in database table rule_opts

CSCvu91292

Snort restarts repeatedly when new custom apps are identified using nmap

CSCvv17599

Multiple vulnerabilities in cpe:2.3:o:linux:linux_kernel:4.14.187:

CSCvv27113

ProcessMetadata for intrusion event uses wrong local_sid constraint to lookup entry

CSCvv54829

FPR device does not recognize USB/pendrive that exeeds 8GB

CSCvv62499

FMC: Remove_peers.pl script should work when FTD is member of a cluster

CSCvv83841

upgrade - Not enough root disk space available in 600_schema/100_update_database.sh

CSCvv84172

Dangling ref in Clustered table and EO upon failed registration

CSCvv91622

Time range is not listed in "show access list" with AC rule having block

CSCvw01547

Deployment fails on MI FTD HA after FMC upgrade from 6.7.0 to 6.8.0

CSCvw37408

An issue was discovered in the DBI module before 1.643 for Perl. The h

CSCvw43610

In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnob ...

CSCvw56551

ASA displays cosmetic NAT warning message when making the interface config changes

CSCvw62288

ASA: 256 byte block depletion when syslog rate is high

CSCvw82067

ASA/FTD 9344 blocks depleted due to high volume of fragmented traffic

CSCvw94160

CIAM: openssl CVE-2020-1971

CSCvx37672

PDF Generation fails resulting in corrupt PDF when AC Policy has more than 10K rules

CSCvx41045

High CPU utilization in sfmbservice in FMC

CSCvx43150

On the FMC, process of registration of member device post RMA is not successful

CSCvx47636

A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 lead

CSCvx47643

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd cra

CSCvx47644

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertio

CSCvx49600

6.6.3-59 FDM UI is not showing events after FXOS upgrade to 2.10.1.106

CSCvx49717

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before

CSCvx51123

FMC UI ERROR : An error occurred saving domain

CSCvx70480

403 error when accessing Policies -> Access Control after exporting User Role from FMC(4600) to FMCv

CSCvx78395

High disk usage alert for /boot

CSCvx89451

ISA3000 shutdown command reboots system and does not shut system down.

CSCvx91317

A remote code execution issue was discovered in MariaDB 10.2 before 10

CSCvx93254

DHCP relay server "Invalid helper address"

CSCvx96024

Occasional policy deployment failures with timeout (all deployments fail after that)

CSCvx97053

Unable to configure ipv6 address/prefix to same interface and network in different context

CSCvy02240

Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities

CSCvy02247

Cisco Firepower System Software Rule Editor Non-impactful Buffer Overflow Vulnerability

CSCvy04430

Management Sessions fail to connect after several weeks

CSCvy08351

Intrusion and Correlation Email Alerts stop being sent to mail server

CSCvy12991

Chassis local date and time may drift back to midnight Jan 1 2015 after reboot

CSCvy14721

ssl traffic dropped by FTD while CH packet has a destination port no greater than source port

CSCvy16004

Delay in DIFF calculations can cause deployment issues and HA App sync timeout in FTDs

CSCvy18138

PIM Register Sent counter does not increase when encapsulated packets with register flag sent to RP

CSCvy18166

AAB snort core due to high volume traffic logging

CSCvy19170

SAML: Memory leaks observed for AnyConnect IKEv2

CSCvy24921

SNMPv3 - SNMP EngineID changes after every configuration change

CSCvy30101

snort2 memory usage can grow beyond expected limits when using ssl decryption

CSCvy30392

Backup generation on FMC fails due to corrupt int_id index in table ids_event_msg_map

CSCvy31424

QP FTD application fails to start due to outdated affinity.conf following FXOS/FTD upgrade

CSCvy31521

Add syslog-ng monitor to the FMC and NGIPS

CSCvy32154

Flows are offloaded after disable the offload cli on policy-map

CSCvy37484

Entries in device_policy_ref is huge causing slow performance when opening DeviceManagement page

CSCvy40401

L2L VPN session bringup fails when using NULL encryption in ipsec configuration

CSCvy41157

HA formation failing after restore

CSCvy41763

Cisco Firepower Threat Defense Software XML Injection Vulnerability

CSCvy43002

Observed crash while running SNMPWalk + S2S-IKEv2 and AnyConnect TVM Profiles

CSCvy60284

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allo

CSCvy60285

The mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free

CSCvy60292

There is a flaw in the xml entity encoding functionality of libxml2 in

CSCvy60294

There's a flaw in libxml2 in versions before 2.9.11. An attacker who i

CSCvy60295

A flaw was found in OpenLDAP. openLDAPâETMs slapd server trigger an assertion failure.

CSCvy60299

The block subsystem in the Linux kernel before 5.2 has a use-after-fre

CSCvy60305

A flaw was found in ImageMagick in versions before 7.0.11. has a potential cipher leak

CSCvy60320

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) befo

CSCvy60322

In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S

CSCvy60326

Integer overflow in the htmldoc 1.9.11 and before may allow attackers

CSCvy60333

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability

CSCvy63464

FTD 1100/ 2100 series reboots with clock set to 2033

CSCvy66530

lrzsz before version 0.12.21~rc can leak information to the receiving

CSCvy66531

There's a flaw in libxml2's xmllint in versions before 2.9.11. An atta

CSCvy67756

Firepower Services HTTPS traffic stops working when matching Do not decrypt rule in SSL policy

CSCvy69453

WM Standby device do not send out coldstart trap after reboot.

CSCvy69730

Cisco FMC Software Configuration Information Disclosure Vulnerability

CSCvy72194

Cisco FMC Software Configuration Information Disclosure Vulnerability

CSCvy73130

FP4100 platform: Active-Standby changed to dual Active after running "show conn" command

CSCvy73554

ASA: "deny ip any any" entry in crypto ACL prevents IKEv2 remote AnyConnect access connections

CSCvy73585

FMC should not allow to configure port-channel ID higher than 8 on FPR1010

CSCvy75724

ZMQ OOM due to less Msglyr pool memory in low end platforms

CSCvy78209

Getting Snort High CPU alerts but top.log is not showing high CPU

CSCvy78525

VRF route lookup for TCP ping is missing

CSCvy79952

ASA/FTD traceback and reload after downgrade

CSCvy82668

SSH session not being released

CSCvy89440

s2sCryptoMap Configuration Loss

CSCvy90162

Traceback watchdog bark at Unicorn Proxy Thread from scaled AC-SSL-SAML Auth TVM profile

CSCvy90821

Autocomplete for "debug snmp ?" not working on ASA

CSCvy95329

Incorrect Access rule matching because of ac rule entry missing

CSCvy95430

SNMP MA Debug tokens first 3 chars are missing.

CSCvy95520

Incorporate fail2ban into IMS to prevent SSH DOS attack

CSCvy96895

ASA disconnects the VTY session using of Active IP address and Standby MAC address after failed over

CSCvy99373

ADI Session Processing Delays when resolving adSamAccountName with AD

CSCvz00961

AnyConnect connection failure related to ASA truncated/corrupt config

CSCvz02076

Snort reload times out causing restart

CSCvz05541

ASA55XX: Expansion module interfaces not coming up after a software upgrade

CSCvz05687

Fragmented Certificate request failed for DND flow

CSCvz08387

ASP drop capture output may display incorrect drop reason

CSCvz09106

Cisco ASA and FTD Software SSL VPN Denial of Service Vulnerability

CSCvz09109

Cluster CCL interface capture shows full packets although headers-only is configured

CSCvz10165

Not able to find upgrade_resume.sh CLI in FTD device in an 6.6.5 release upgrade scenario

CSCvz14305

IKEv2 RA 3rd party dual stack IPv4 and IPv6 requested - ASA doesn't reply for IKE Auth

CSCvz14377

Losing admin and other users from Mysql DB and EO

CSCvz15755

FTD - Port-channel not coming up after upgrade and may generate core file

CSCvz19634

FTD software upgrade may fail at 200_pre/505_revert_prep.sh

CSCvz24238

Cisco Firepower Management Center Cross-site Scripting Vulnerability

CSCvz24765

device rebooted with snmpd core

CSCvz25064

The wordexp function in the GNU C Library (aka glibc) through 2.33 may

CSCvz25066

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 do

CSCvz25454

ASA: Drop reason is missing from 129 lines of asp-drop capture

CSCvz30558

Cisco Firepower Management Center Cross-site Scripting Vulnerability

CSCvz30582

Cisco Firepower Management Center Cross-site Scripting Vulnerability

CSCvz31880

ASA Crashing with 'Unicorn Proxy Thread cpu: 9 watchdog_cycles' after stopping scaled stress test.

CSCvz32386

FTD Deployment error when FMC pushes PFS21 and IKEv1 settings on same crypto map entry

CSCvz32593

QP4110 and QW4115 in disabled state with CD App Sync error is Rsync is not enabled on active device

CSCvz32623

An integer overflow in util-linux through 2.37.1 can potentially cause

CSCvz35669

KP-2110 Standby disabled upgrade 6.6.4-64 to 7.0.1-30 "CD App Sync error is App Config Apply Failed"

CSCvz35787

FTD misleading OVER_SUBSCRIBED flow flag for mid-stream flow

CSCvz36862

FMC policy deployment takes more than 15 min on phase 3

CSCvz36905

If we add v6 route same as V route , duplicate entry is getting created.

CSCvz36933

Sensor SNMP process may restart when policy deploy

CSCvz38811

Deleted files holding disk space under Java process

CSCvz41761

FMC Does not allow to create an EIGRP authentication secret key using the $ character

CSCvz44339

FTD - Deployment will fail if you try to delete an SNMP host with ngfw-interface and host-group

CSCvz44645

FTD may traceback and reload in Thread Name 'lina'

CSCvz46333

FTD policy deployment failure due to internal socket connection loss

CSCvz46879

Fine tune mojo_server configuration on Sourcefire modules

CSCvz47709

[IMS_7_1_0] DeployACPolicyPostUpgrade at Upgrade FMC 7.1.0 - 2022

CSCvz51157

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/s

CSCvz51258

show tech-support output can be confusing when there crashinfo, need to clean up/make more intuitive

CSCvz53884

SNMP OID HOST-RESOURCES-MIB (1.3.6.1.2.1.25) does not exist on FMC

CSCvz53993

Random packet block by Snort in SSL flow

CSCvz57917

High unmanaged disk usage on /ngfw filled with module-xxxx-x86_64.tgz files in packages folder

CSCvz59950

IKEv2 Crash from scaled long duration test on KP-FPR2130

CSCvz60142

ASA/FTD stops serving SSL connections

CSCvz61431

"Netsnmp_update_ma_config: ERROR Failed to build req"messages seen during cluster configuration sync

CSCvz61456

Software upgrade on ASA application may failure without obvious reasons

CSCvz61658

CPU hogs in update_mem_reference

CSCvz61689

Port-channel member interfaces are lost and status is down after software upgrade

CSCvz61767

Policy deployment with SNMPv2 or SNMPv1 configuration fails

CSCvz62517

SRU install should validate files upon completion

CSCvz63444

FMC custom widgets keep polling and do not return any data

CSCvz64548

SFTunnel on device not processing event messages

CSCvz65181

Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerabilit

CSCvz66474

Snmpd core files generated on FTD

CSCvz67001

FMC Event backups to remote SSH storage targets fail

CSCvz67816

IPV6 DNS PTR query getting modified on FTD

CSCvz68336

SSL decryption not working due to single connection on multiple in-line pairs

CSCvz69729

Unstable client processes may cause LINA zmqio traceback on FTD

CSCvz69834

snort2 enabled with ssl inspection can lead to unexpected memory growth

CSCvz70958

High Control Plane CPU on StandBy due to dhcpp_add_ipl_stby

CSCvz71064

Deleting The Context From ASA taking Almost 2 Minutes with ikev2 tunnel

CSCvz71569

FTD Traceback & reload due to process ZeroMQ out of memory condition

CSCvz81342

Diskmanager not pruning AMP File Capture files

CSCvz82562

ASA/FTD: site-to-site VPN - traffic incorrectly fragmented

CSCvz83432

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 121, seq 18)

CSCvz84733

LACP packets through inline-set are silently dropped

CSCvz85683

Wrong syslog message format for 414004

CSCvz85913

ASN.1 strings are represented internally within OpenSSL as an ASN1_STR for CISCO-SSL-1.0.2

CSCvz86256

Primary ASA should send GARP as soon as split-brain is detected and peer becomes cold standby

CSCvz89126

ASDM session/quota count mismatch in ASA when multiple context switchover is done from ASDM

CSCvz90375

Low available DMA memory on ASA 9.14 at boot reduces AnyConnect sessions supported

CSCvz90722

With object-group in crypto ACL sum of hitcnt mismatches with the individual elements

CSCvz91218

Statelink hello messages dropped on Standby unit due to interface ring drops on high rate traffic

CSCvz91618

KP - traceback observed when add and remove snmp host-group

CSCvz95949

FP1120 9.14.3 : temporary split brain happened after active device reboot

CSCvz96462

IP Address 'in use' though no VPN sessions

CSCwa00038

Disk corruption occurs when /mnt/disk0 partition is full and blade is rebooted

CSCwa04134

The in-memory certificate cache in strongSwan before 5.9.4 has a remot

CSCwa04395

User Agent session processing crashes SFDataCorrelator on 6.6.5 standalone sensors

CSCwa05385

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 124, seq 19)

CSCwa06960

ASA Traceback and Reload due to CTM daemon during internal health test

CSCwa11079

Pre allocate sub context for DRBG health test

CSCwa11088

Access rule-ordering gets automatically changed while trying to edit it before page refresh/load

CSCwa11186

Mask sensitive information in aaa ldap debugs

CSCwa13873

ASA Failover Split Brain caused by delay on state transition after "failover active" command run

CSCwa15291

A crafted request uri-path can cause mod_proxy to forward the request to an origin server...

CSCwa18858

ASA drops non DNS traffic with reason "label length 164 bytes exceeds protocol limit of 63 bytes"

CSCwa19713

Traffic dropped by ASA configured with BVI interfaces due to asp drop type "no-adjacency"

CSCwa20516

FMC policy deployment takes more than 14 min

CSCwa20758

WR6, WR8 and LTS18 commit id update in CCM layer(sprint 124, seq 20)

CSCwa26038

ICMP inspection causes packet drops that are not logged appropriately

CSCwa27822

Lina process remains in started status after a major FTD upgrade to 6.7 or 7.0

CSCwa28822

FTD moving UI management from FDM to FMC causes traffic to fail

CSCwa30114

"Error:NAT unable to reserve ports" when using a range of ports in an object service

CSCwa31373

duplicate ACP rules are generated on FMC 6.6.5 after rule copy.

CSCwa32286

WR6, WR8 and LTS18 commit id update in CCM layer (sprint 125, seq 21)

CSCwa32527

7.1 to 7.2 upgrade crash if SNMP configured on ngfw-management interface

CSCwa33364

FTD misleading OVER_SUBSCRIBED flow flag for mid-stream flow-issue seen on MR branches

CSCwa35200

Some syslogs for AnyConnect SSL are generated in admin context instead of user context

CSCwa36661

Traffic is not hitting on some egress interfaces of user vrf due to routes missing in asp table

CSCwa36672

ASA on FPR4100 traceback and reload when running captures using ASDM

CSCwa36678

Random FTD reloads with the traceback during deployment from FMC

CSCwa40223

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability

CSCwa40237

Cisco Firepower Management Center File Upload Security Bypass Vulnerability

CSCwa40719

Traceback: Secondary firewall reloading in Threadname: fover_parse

CSCwa42350

ASA installation/upgrade fails due to internal error "Available resources not updated by module"

CSCwa43475

ASA SNMPd traceback in netsnmp_subtree_split

CSCwa43497

Datapath deadlocks seen on when sending ICMP PMTU for AnyConnect-SSL

CSCwa46963

Security: CVE-2021-44228 -> Log4j 2 Vulnerability

CSCwa50145

FPR8000 sensor UI login creates shell user with basic privileges

CSCwa51241

Switch detected unknown MAC address from FPR1140 Management Interface

CSCwa53489

Lina Traceback and Reload Due to invalid memory access while accessing Hash Table

CSCwa55418

multiple db folders current-policy-bundle after deployment with anyconnect package before upgrade

CSCwa56449

ASA traceback in HTTP cli EXEC code

CSCwa56975

DHCP Offer not seen on control plane

CSCwa57115

New access-list are not taking effect after removing non-existance ACL with objects.

CSCwa60574

ASA traceback and reload on snp_ha_trans_alloc_msg_muxbuf_space function

CSCwa61218

Polling OID "1.3.6.1.4.1.9.9.171.1.3.2.1.2" gives negative index value of the associated tunnel

CSCwa61361

ASAv traceback when SD_WAN ACL enabled, then disabled (or vice-versa) in PBR

CSCwa62025

IPv6: Some of egress interfaces of global and user vrf routes are missing in asp table

CSCwa65389

ASA traceback and reload in Unicorn Admin Handler when change interface configuration via ASDM

CSCwa67884

Conditional flow-offload debugging produces no output

CSCwa68660

FTP inspection stops working properly after upgrading the ASA to 9.12.4.x

CSCwa70029

FDM UI and CLI discrepancy for static routes after software upgrade

CSCwa72530

FTD: Time gap/mismatch seen when new node joins a Cluster Control node under history

CSCwa73172

ASA reload and traceback in Thread Name: PIX Garbage Collector

CSCwa74900

Traceback and reload after enabling debug webvpn cifs 255

CSCwa75077

Time-range objects incorrectly populated in prefilter rules

CSCwa75966

ASA: Reload and Traceback in Thread Name: Unicorn Proxy Thread with Page fault: Address not mapped

CSCwa76564

ASDM session/quota count mismatch in ASA when multiple context switch before and after failover

CSCwa76822

Tune throttling flow control on syslog-ng destinations

CSCwa77073

SNMP is responding to snmpgetbulk with unexpected order of results

CSCwa77083

Host information is missing when Security Zones are configured in Network Discovery rules

CSCwa78082

FMC intrusion event search produces inconsistent results

CSCwa79494

Traffic keep failing on Hub when IPSec tunnel from Spoke flaps

CSCwa79676

FPR1010 in HA Printing Broadcast Storm Alerts for Multiple Interfaces

CSCwa79980

SNMP get command in FPR does not show interface index.

CSCwa85043

Traceback: ASA/FTD may traceback and reload in Thread Name 'Logger'

CSCwa85138

Multiple issues with transactional commit diagnostics

CSCwa85340

Unable to generate the PDF with access policy having large nested objects

CSCwa86210

When PM disables mysqld, sometimes it is taking longer than expected to fully shutdown.

CSCwa87315

ASA/FTD may traceback and reload in Thread Name 'IP Address Assign'

CSCwa87597

ASA/FTD Failover: Joining Standby reboots when receiving configuration replication from Active mate

CSCwa88571

Unable to register FMC with the Smart Portal

CSCwa91070

Cgroup triggering oom-k for backup process

CSCwa94894

ASA/FTD may traceback and reload in Thread Name 'DATAPATH-4-9608'

CSCwa95079

ASA/FTD Traceback and reload due to NAT configuration

CSCwa96759

Lina may traceback and reload on tcpmod_proxy_handle_mixed_mode

CSCwa97784

ASA: Jumbo sized packets are not fragmented over the L2TP tunnel

CSCwa98684

Console has an excessive rate of warnings during policy deployment

CSCwa98853

Error F0854 FDM Keyring's RSA modulus is invalid

CSCwa98983

Upgrade failed on FPR2100-HA at 800_post/901_reapply_sensor_policy.pl

CSCwa99931

"update_mem_reference" process taking high CPU in HA pair

CSCwb01700

ASA: SSH and ASDM sessions stuck in CLOSE_WAIT causing lack of MGMT for the ASA

CSCwb01919

FP2140 ASA 9.16.2 HA units traceback and reload at lua_getinfo (getfuncname)

CSCwb02316

"Non stop forwarding not supported on '1'" error while configuring MAC address

CSCwb06847

ASA/FTD may traceback and reload in Thread Name 'DATAPATH-9-11543'

CSCwb07908

Standby FTD/ASA sends DNS queries with source IP of 0.0.0.0

CSCwb07981

Traceback: Standby FTD reboots and generates crashinfo and lina core on thread name cli_xml_server

CSCwb08644

ASA/FTD traceback and reload at IKEv2 from Scaled S2S+AC-DTLS+SNMP long duration test

CSCwb11939

ASA/FTD MAC modification is seen in handling fragmented packets with INSPECT on

CSCwb12730

Policy deployment failed in FMC however FTD deployment status shows "INPROGRESS"

CSCwb17206

FTD Multi Instance Clustering: Data nodes unable to join with RPC_SYSTEMERROR messages

CSCwb18252

FTD/ASA: Traceback on BFD function causing unexpected reboot

CSCwb19648

SNMP queries for crasLocalAddress are not returning the assigned IPs for SSL/DTLS tunnels.

CSCwb24039

ASA traceback and reload on routing

CSCwb25809

Single Pass - Traceback due to stale ifc

CSCwb28849

ASA/FTD: Mitigation of OpenSSL vulnerability CVE-2022-0778

CSCwb32068

Automatic Download VDB Failure on a Firepower Management Center

CSCwb32418

Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability

CSCwb33334

ASA: crash after sending some traffic over RAVPN tunnel

CSCwb39431

FTD unified logs do not print the log as per rfc5424 standard

CSCwb51707

ASA Traceback and reload in process name: lina

CSCwb53172

FTD: IKEv2 tunnels flaps every 24 hours and crypto archives are generated

CSCwb54791

ASA DHCP server fails to bind reserved address to Linux devices

CSCwb57615

Configuring pbr access-list with line number failed.

CSCwb59465

ASA/FTD may traceback (watchdog) and reload when generating a syslog from the VPN Failover subsystem

CSCwb59488

ASA/FTD Traceback in memory allocation failed

CSCwb65447

FTD: AAB cores are not complete and not decoding

CSCwb65718

FMC is stuck on loading SI objects page

CSCwb67040

FP4112|4115 Traceback & reload on Thread Name: netfs_thread_init

CSCwb68642

ASA traceback in Thread Name: SXP CORE

CSCwb71460

ASA traceback in Thread Name: fover_parse and triggered by snmp related functions

CSCwb74938

ASA traceback and reload with error "assertion "0" failed: file "timer_services.c", line 165"

CSCwb80559

FTD offloads SGT tagged packets although it should not

CSCwb82796

ASA/FTD firewall may traceback and reload when tearing down IKE tunnels

CSCwb83388

ASA HA Active/standby tracebacks seen approximately every two months.

CSCwb85633

Snmpwalk output of memory does not match show memory/show memory detail

CSCwb86118

TPK ASA: Device might get stuck on ftp copy to disk

CSCwb87498

Lina traceback and reload during EIGRP route update processing.

CSCwb89187

Flex Config allow - "timeout icmp-error hh:mm:ss"

CSCwb90074

ASA: Multiple Context Mixed Mode SFR Redirection Validation

CSCwb93932

ASA/FTD traceback and reload with timer services assertion

CSCvs42388

Gratuitous logging of string: "Memory stats information for preprocessor is NULL"

CSCvx76665

Error messages "Updating Interface Status failed" seen on 2100 and 1010

CSCvx78968

ASA/FTD Traceback and reload on Thread Name: IKEv2 Daemon with VTIs configured

CSCvy60831

ASA/FTD Memory block location not updating for fragmented packets in data-path

CSCvy89440

s2sCryptoMap Configuration Loss

CSCvz02076

Snort reload times out causing restart

CSCvz02398

Crypto archive generated with SE ring timeout on 7.0

CSCvz03524

PKI "OCSP revocation check" failing due to sha256 request instead of sha1

CSCvz32386

FTD Deployment error when FMC pushes PFS21 and IKEv1 settings on same crypto map entry

CSCvz33468

NAT stops working after the changes in/to object-group/ nat hitcount not updated in FQDN_NAT

CSCvz40352

ASA traffic dropped by Implicit ACL despite the fact of explicit rules present on Access-list

CSCvz53993

Random packet block by Snort in SSL flow

CSCvz55849

FTD Traceback and Reload on process LINA

CSCvz66795

ASA traceback and reload in SSH process when executing the command "show access-list"

CSCvz76746

While implementing management tunnel a user can use open connect to bypass anyconnect.

CSCvz85437

FTD 100G interfaces down after upgrade of FXOS and FTD to 2.10.1.159 and 6.6.4

CSCvz89327

OSPFv2 flow missing cluster centralized "c" flag

CSCvz89545

SSL VPN performance degraded and significant stability issues after upgrade

CSCvz92932

ASA show tech execution causing spike on CPU and impacting to IKEv2 sessions

CSCvz94153

NTP sync on IPV6 will fail if the IPV4 address is not configured

CSCvz95108

FTD Deployment failure post upgrade due to major version change on device

CSCwa02929

FTD Blocks Traffic with SSL Flow Error CORRUPT_MESSAGE

CSCwa03275

BGP routes shows unresolved and dropping packet with asp-drop reason "No route to host"

CSCwa03347

IPv6 PIM packets are dropped in ASP with invalid-ip-length drop reason

CSCwa08262

AnyConnect users with mapped group-policies take attributes from default GP under the tunnel-group

CSCwa11052

SNMP Stopped Responding After Upgrading to Version- 9.14(2)15

CSCwa14725

ASA/FTD traceback and reload on IKE Daemon Thread

CSCwa19443

Flow Offload - Compare state values remains in error state for longer periods

CSCwa20516

FMC policy deployment takes more than 14 min

CSCwa28895

FTD SSL Proxy should allow configurable or dynamic maximum TCP window size

CSCwa46963

Security: CVE-2021-44228 -> Log4j 2 Vulnerability

CSCwa55878

FTD Service Module Failure: False alarm of "ND may have gone down"

CSCwa58686

ASA/FTD Change in OGS compilation behavior causing boot loop

CSCwa67882

Offloaded GRE tunnels may be silently un-offloaded and punted back to CPU

CSCwa70008

Expired certs cause Security Intelligence updates to fail

CSCwa88571

Unable to register FMC with the Smart Portal

CSCvg66052

2 CPU Cores continuously spike on firepower appliances

CSCvq43454

ENH : Support a tolerance time for the "NotValidBefore" timestamp, while using SAML auth

CSCvs27336

Traceback on ASA by Smart Call Home process

CSCvs61701

DME process crash due to memory leak on Firepower 2100

CSCvv43190

Crypto engine errors when GRE header protocol field doesn't match protocol field in inner ip header

CSCvv48942

Snmpwalk showing traffic counter as 0 for failover interface

CSCvw71405

FPR1120 running ASA traceback and reload in crypto process.

CSCvx16134

100% cpu-usage for some processes seen in "show processes cpu-usage" though using multicore

CSCvx50980

ASA CP CPU wrong calculation leads to high percentage (100% CP CPU)

CSCvx65178

SNMP bulkget not working for specific OIDs in firewall mib and device performance degradation

CSCvx80830

VPN conn fails from same user if Radius server sends a dACL and vpn-simultaneous-logins is set to 1

CSCvx90486

In some cases snmpwalk for ifXTable may not return data interfaces

CSCvx95884

High CPU and massive "no buffer" drops during HA bulk sync and during normal conn sync

CSCvy02247

Cisco Firepower System Software Rule Editor Non-impactful Buffer Overflow Vulnerability

CSCvy04343

ASA in PLR mode,"license smart reservation" is failing.

CSCvy09436

DHCP reservation fails to apply reserved address for some devices

CSCvy10583

ASA Traceback and Reload in Thread Name: DATAPATH

CSCvy12782

FTD/ASA: PATed traffic impacted when configured on ixgbe-vf SRIOV interfaces in HA

CSCvy16179

ASA cluster Traceback with Thread Name: Unicorn Admin Handler even when running fix for CSCuz67596

CSCvy17078

Traceback: ASA on FPR 2110 traceback and reload on process Lina

CSCvy21334

Active tries to send CoA update to Standby in case of "No Switchover"

CSCvy27283

ASA/FTD SNMPv3 polling may fail using privacy algorithms AES192/AES256

CSCvy31229

No space left disk space is full on /ngfw

CSCvy33105

Ambiguous command error is shown for 'show route bgp' or 'show route isis' if DNS lookup is enabled

CSCvy33676

UN-NAT created on FTD once a prior dynamic xlate is created

CSCvy35737

FTD traceback and reload during anyconnect package verification

CSCvy39621

ASA/FTD sends continuous Radius Access Requests Even After Max Retry Count is Reached

CSCvy43447

FTD traceback and reload on Lic TMR Thread on Multi Instance FTD

CSCvy47108

Remote Access IKEv2 VPN session cannot be established because of stuck Uauth entry

CSCvy48159

ASA Traceback & reload on process name lina due to memory header validation

CSCvy49732

ASA/FTD may traceback and reload in Thread Name 'ssh'

CSCvy50011

ASA traceback in IKE Daemon process and reload

CSCvy51659

Long OCSP timeout may cause AnyConnect authentication failure

CSCvy51814

Firepower flow-offload stops offloading all existing and new flows

CSCvy52074

ASA/FTD may traceback and reload in Thread Name 'webvpn_task'

CSCvy52924

FTD loses OSPF network statements config for all VRF instances upon reboot

CSCvy53461

RSA keys & Certs get removed post reload on WS-SVC-ASA-SM1-K7 with ASA code 9.12.x

CSCvy55356

CPU hogs less than 10 msec are produced contrary to documentation

CSCvy56395

ASA traceback and reload due to snmp encrypted community string when key config is present

CSCvy57905

VTI tunnel interface stays down post reload on KP/WM platform in HA

CSCvy58268

Block 80 and 256 exhaustion snapshots are not created

CSCvy60100

SNMP v3 configuration lost after reboot for HA

CSCvy64492

ASAv adding non-identity L2 entries for own addresses on MAC table and dropping HA hellos

CSCvy64911

Debugs for: SNMP MIB value for crasLocalAddress is not showing the IP address

CSCvy69189

FTD HA stuck in bulk state due to stuck vpnfol_sync/Bulk-sync keytab

CSCvy72194

Cisco FMC Software Configuration Information Disclosure Vulnerability

CSCvy72846

ASA accounting reports incorrect Acct-Session-Time

CSCvy74781

The standby device is sending the keep alive messages for ssl traffic after the failover

CSCvy74984

ASAv on Azure loses connectivity to Metadata server once default outside route is used

CSCvy82794

ASA/FTD traceback and reload when negating snmp commands

CSCvy90836

ASA Traceback and reload in Thread Name: SNMP ContextThread

CSCvy91668

PAT pool exhaustion with stickiness traffic could lead to new connection drop.

CSCvy92990

FTD traceback and reload related to SSL after upgrade to 7.0

CSCvy96625

Revert 'fix' introduced by CSCvr33428 and CSCvy39659

CSCvy96803

FTD traceback and reload in Process Name lina related to SNMP functions

CSCvy98458

FP21xx -traceback "Panic:DATAPATH-10-xxxx -remove_mem_from_head: Error - found a bad header"

CSCvz00383

FTD lina traceback and reload in thread Name Checkheaps

CSCvz00699

Traceback in webvpn and reload experienced periodically after ASA upgrade

CSCvz05189

FTD reload with Lina traceback during xlate replication in Cluster

CSCvz07614

ASA: Orphaned SSH session not allowing us to delete a policy-map from CLI

CSCvz15529

ASA traceback and reload thread name: Datapath

CSCvz20544

ASA/FTD may traceback and reload in loop processing Anyconnect profile

CSCvz20679

FTDv - Lina Traceback and reload

CSCvz21886

Twice nat's un-nat not happening if nat matches a pbr acl that matches a port number instead of IP

CSCvz23157

SNMP agent restarts when show commands are issued

CSCvz25434

ASA/FTD blackholes traffic due to 1550 block depletion when BVI is configured as DHCP client

CSCvz27235

Multiple Cisco Products Snort Modbus Denial of Service Vulnerability

CSCvz29233

ASA: ARP entries from custom context not removed when an interface flap occurs on system context

CSCvz30333

FTD/Lina may traceback when "show capture" command is executed

CSCvz30933

ASA tracebacks and reload when clear configure snmp-server command is issued

CSCvz34831

If ASA fails to download DACL it will never stop trying

CSCvz37306

ASDM session is not served for new user after doing multiple context switches in existing user

CSCvz38332

FTD/ASA - Stuck in boot loop after upgrade from 9.14.2.15 to 9.14.3

CSCvz38361

BGP packets dropped for non directly connected neighbors

CSCvz38692

ASAv traceback in snmp_master_callback_thread and reload

CSCvz39565

ASA/FTD Traceback and Reload during bulk VPN session connect

CSCvz39646

ASA/AnyConnect - Stale RADIUS sessions

CSCvz43414

Internal ldap attribute mappings fail after HA failover

CSCvz43455

ASAv observed traceback while upgrading hostscan

CSCvz48407

Traceback and reload in Thread Name: DATAPATH-15-18621

CSCvz53142

ASA does not use the interface specified in the name-server command to reach IPv6 DNS servers

CSCvz57710

conf t is converted to disk0:/t under context-config mode

CSCvz58710

ASA traceback due to SCTP traffic.

CSCvz60970

ASA Traceback in Thread Name: DATAPATH-4-23199 in enic_put / FREEB when sending LU to statelink

CSCvz61160

ASA traceback on DATAPATH when handling ICMP error message

CSCvz64470

ASA/FTD Traceback and reload due to memory corruption when generating ICMP unreachable message

CSCvz69571

ASA log shows wrong value of the transferred data after the anyconnect session terminated.

CSCvz73146

FTD - Traceback in Thread Name: DATAPATH

CSCvz73709

ASA/FTD Standby unit fails to join HA

CSCvz75988

Inconsistent logging timestamp with RFC5424 enabled

CSCvz77744

OSPFv3: FTD Wrong "Forwarding address" added in ospfv3 database

CSCvz84850

ASA/FTD traceback and reload caused by "timer services" function

CSCvf88062

CTM: Nitrox S/G lengths need to be validated

CSCvg69380

ASA - rare cp processing corruption causes console lock

CSCvh19737

HTTPS access on FTD data interface (off-box management) is failing

CSCvi96835

No validation err when changing host thats part of a group object used in a routing policy, to Range

CSCvj08826

FMC ibdata1 file might grow large in size

CSCvm82290

ASA core blocks depleted when host unreachable in IRB/TFW configuration

CSCvo34210

ASA running 9.6.4.20 Traceback in threadname Unicorn Proxy Thread

CSCvp13352

ASA continues to do TCP keepalives for Client side connections even after vpn session times out

CSCvp15559

Traceback on secondary ASA during config synchronisation

CSCvp28713

Input/Output interfaces in packet tracer RESULT are shown as "UNKNOWN"

CSCvp69936

ASA : Traceback on tcp_intercept Thread name : Threat detection

CSCvq98396

ASA: crypto session handles leak on the standby unit

CSCvr11958

AWS FTD: Deployment failure with ERROR: failed to set interface to promiscuous mode

CSCvr33428

FMC generates Connection Events from a SYN flood attack

CSCvr77005

Traffic does not fallback to primary interface from crypto map when interface becomes available

CSCvr85295

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote

CSCvs13204

ASAv failover traffic on SR-IOV interfaces might be dropped due to interface-down

CSCvs50538

Firewall engine should fall back on info from SSL handshake if SSL engine is not returning a verdict

CSCvs72390

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

CSCvs72450

FXOS - Recover hwclock of service module from corruption due to simultaneous write collision

CSCvs74802

AnyConnect/S2S IKEv2 crypto policy occasionally not deployed to device

CSCvs82926

Critical RPM alert on FRP 1000 and FPR2100 Series with ASA 'Chassis 0 Cooling Fan OK' SCH message

CSCvs84542

ASA traceback with thread: idfw_proc

CSCvs95188

FXOS FTD Multi Instance CPU cores shared between different instances

CSCvt10944

ctm crashed while sending emix traffic over VTI tunnel

CSCvt11885

Running the migration script exits with an out of memory error

CSCvt37303

Prefilter Rule zone validation (activity validation) is bypassed in HW layer for UI

CSCvt39977

Invalid packet data when PSNG_TCP_PORTSCAN [122:1:1] rule alerts.

CSCvt48260

Standby unit traceback at fover_parse and boot loop when detecting Active unit

CSCvt52604

Interfaces page from Objects section of the FMC does not load (domains page is likely affected also)

CSCvt55927

Unable to break HA in 6.4.0.9-34 FDM

CSCvt71529

ASA traceback and reload during SSL handshake

CSCvt74194

Error getting unified2 record: Corrupt file

CSCvt75760

Traceback/Page-fault in Clientless WebVPN due to HTTP cleanup

CSCvt92077

Ping Failure on ASAv - 9.13 after CAT9k reboot

CSCvt97205

SNMPPOLL/SNMPTRAP to remote end (site-to-site vpn) ASA interface fails on ASA 9.14.1

CSCvu02594

Snort taking long time to terminate, because of too many async sessions

CSCvu09496

DNS data collected and exported multiple times while same DNS policy referenced in many ACP's

CSCvu18510

MonetDB's eventdb crash causes loss of connection events on FMC 6.6.0 and 6.6.1

CSCvu30704

ASA traceback with crashinfo of size "0"

CSCvu33992

traceback: ASA reloaded lina_sigcrash+1394

CSCvu44472

FMC System processes are starting

CSCvu75855

stunnel process enabled on managed device when it should not be

CSCvu77689

FTP to FileZilla miscategorized as SMTP

CSCvu82680

Some performance files are included as part of FTD Backup which should not be

CSCvu84127

Firepower may reboot for no apparent reason

CSCvu87906

Backup file keep growing in 6.6.0-90 (Unified Event Files are Incorrectly Included In Backup)

CSCvu89110

ASA: Block new conns even when the "logging permit-hostdown" is set & TCP syslog is down

CSCvu94878

The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepan

CSCvu97112

SNMP polling stopped working on active device in HA

CSCvu97242

2100: Corefile and crashinfo might both be truncated and incomplete in the event of a crash

CSCvu98222

FTD Lina engine may traceback in datapath after enabling SSL decryption policy

CSCvv00719

Access Control Policy with time range object is not getting hit

CSCvv02925

OSPF neighbourship is not establising

CSCvv07917

ASA learning a new route removes asp route table created by floating static

CSCvv10778

Traceback in threadname DATAPATH (5585) or Lina (2100) after upgrade to 9.12.4

CSCvv15572

ASA traceback observed when "config-url" is entered while creating new context

CSCvv17585

Netflow template not sent under certain circumstances

CSCvv19230

ASAv Anyconnect users unexpectedly disconnect with reason: Idle Timeout

CSCvv20780

Policy deploy fails with "Failed to hold the deployment transaction" error

CSCvv24647

FP2100 - SNMP: incorrect values returned for Ethernet statistics polling

CSCvv24976

Static default route is not installed in the rib after shutdown the RRI route interface

CSCvv25394

After upgrade ASA swapped names for disks, disk0 became disk1 and vice versa.

CSCvv30172

Intermittently after reboot, ADI can't join KCD

CSCvv31755

Interface status may be mismatched between application and chassis due to missed update

CSCvv32333

ASA still doesn't allow to poll internal-data0/0 counters via SNMP in multiple mode

CSCvv36788

MsgLayer[PID]: Error : Msglyr::ZMQWrapper::registerSender() : Failed to bind ZeroMQ Socket

CSCvv37629

Malformed SIP packets leads to 4k block hold-up till SIP conn timeout causing probable traffic issue

CSCvv40406

FTD/ASA creates coredump file with "!" character in filename (lina changes).

CSCvv41453

Removing static ipv6 route from management-only route table affects data traffic

CSCvv44863

Failure to load default threat category setting from URL filtering configuration file

CSCvv49698

ASA Anyconnect url-redirect not working for ipv6

CSCvv49800

ASA/FTD: HA switchover doesn't happen with graceful reboot of firepower chassis

CSCvv50338

Traceback Cluster unit on snpi_nat_xlate_destroy+2508

CSCvv52349

No utility to handle XFS corruption on 2100/1000 series Firepower devices

CSCvv52591

DMA memory leak in ctm_hw_malloc_from_pool causing management and VPN connections to fail

CSCvv53696

ASA/FTD traceback and reload during AAA or CoA task of Anyconnect user

CSCvv55248

Syslogs generated for ACL transaction commit are not in consistent format & not available some times

CSCvv55291

Snmp user fails on standby device after rejoing ha, after ha break.

CSCvv56644

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web DoS

CSCvv58332

ASA/FTD is reading BGP MP_REACH_NLRI attribute's next-hop bytes in reverse order

CSCvv62305

ASA traceback and reload in fover_parse when attempting to join the failover pair.

CSCvv63412

ASA dropping all traffic with reason "No route to host" when tmatch compilation is ongoing

CSCvv64068

After modify network/service object name. mis-match will occur on hash value of ACL in syslog.

CSCvv65184

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web DoS

CSCvv66005

ASA traceback and reload on inspect esmtp

CSCvv66561

The key-string support under ssh pubkey-chain server is not working as intended.

CSCvv66920

Inner flow: U-turn GRE flows trigger incorrect connection flow creation

CSCvv67196

FTD does not try all the crl urls for getting crl file

CSCvv67398

Inspect-snmp drops thru-the-box snmp paks if snmp is disabled

CSCvv67500

ASA 9.12 random traceback and reload in DATAPATH

CSCvv68669

Traffic to virtual IP address dropped on system context of Master ASA due to failed classification

CSCvv69991

FTD stuck in Maintenance Mode after upgrade to 6.6.1

CSCvv70984

ASA traceback while modifying the bookmark SSL Ciphers configuration

CSCvv71097

traceback: ASA reloaded snp_fdb_destroy_fh_callback+104

CSCvv72466

OSPF network commands go missing in the startup-config after upgrading the ASA

CSCvv73017

Traceback due to fover and ssh thread

CSCvv74658

FTD/ASA creates coredump file with "!" character in filename (zmq changes (fxos) for CSCvv40406 )

CSCvv79897

Block "sensor restart" command for FTD units to prevent Lina crash and system reboot event

CSCvv80782

Traceback leads to the purg_process

CSCvv85029

ASA5555 traceback and reload on Thread Name: ace_work

CSCvv86861

Traceback during SNMP traffic testing

CSCvv86926

Unexpected traceback and reload on FTD creating a Core file

CSCvv87232

ASA: High number of CPU hog in igb_saleen_io_sfp_mod_poll_thread process

CSCvv87496

ASA cluster members 2048 block depletion due to "VPN packet redirect on peer"

CSCvv88017

ASA: EasyVPN HW Client triggers duplicate phase 2 rekey causing disconnections across the tunnel

CSCvv89355

DHCP-Proxy renewal timer is not started after failover

CSCvv89400

ASA SNMPv3 Poll fails when using AES 256

CSCvv89708

ASA/FTD may traceback in thread name fover_FSM_thread and reload

CSCvv89715

Fastpath rules for 8000 series stack disappear randomly from the FMC

CSCvv90079

No router BGP pushed after making chnages on 9300 intra chassis cluster

CSCvv90181

No deployment failure reason in transcript if 'show running-config' is running during deployment

CSCvv90720

ASA/FTD: Mac address-table flap seen on connected switch after a HA switchover

CSCvv90753

Syncd process hangs due to SLA

CSCvv94165

FTD 6.6 : High CPU spikes on snmpd process

CSCvv94701

ASA keeps reloading with "octnic_hm_thread". After the reload, it takes very long time to recover.

CSCvv96193

ASA/FTD debugs do not print clear failure reason when no proposal is chosen

CSCvv97527

asa config timeout command breaks snort's DAQ configuration

CSCvv97877

Secondary unit not able to join the cluster

CSCvw00161

ASA traceback and reload due to VPN thread on firepower 2140

CSCvw01767

CRL fail-open option may not work depending on hierarchy

CSCvw03628

ASA will not import CA certificate with name constraint of RFC822Name set as empty

CSCvw05392

Message appearing constantly on diagnostic-cli

CSCvw06195

ASA traceback cp_midpath_process_thread

CSCvw06298

ASA duplicate MAC addresses in Shared Interfaces of different Contexts causing traffic impact

CSCvw07000

Snort busy drops with PDTS Tx queue stuck

CSCvw12008

ASA traceback and reload while executing "show tech-support" command

CSCvw12040

Heapcache Memory depleting rapidly due to certificate chain failed validation

CSCvw12100

ASA stale VPN Context seen for site to site and AnyConnect sessions

CSCvw13348

WR6, WR8 and LTS18 commit id update in CCM layer (sprint 98, seq 2)

CSCvw15359

KP fxos snmp has uninit strings for entPhysicalSerialNum,entPhysicalAssetID on EPM index

CSCvw16165

Firepower 1010 Series stops passing traffic when a member of the port-channel is down

CSCvw16619

Offloaded traffic not failed over to secondary route in ECMP setup

CSCvw18614

ASA traceback in the LINA process

CSCvw19227

Unable to remove non-used prefix-list object

CSCvw19907

restart of snmpd for agx communication fail to snmp-sa

CSCvw21145

Duplicate NAT rule error when saving the policy (caused by duplicate Auto NAT rules)

CSCvw21161

Duplicate NAT rule error when saving the policy (different rules are detected as duplicates)

CSCvw21844

FTD traceback and reload on DATAPATH thread when processing encapsulated flows

CSCvw22576

"no mfib forwarding" command on state fover interface on standby only

CSCvw22881

radius_rcv_auth can shoot up control plane CPU to 100%.

CSCvw22986

Secondary unit stuck in Bulk sync infinitely due to interface of Primary stuck in init state

CSCvw23199

ASA/FTD Traceback and reload in Thread Name: Logger

CSCvw24556

TCP File transfer (Big File) not properly closed when Flow offload is enabled

CSCvw26171

ASA syslog traceback while strncpy NULL string passed from SSL library

CSCvw26331

ASA traceback and reload on Thread Name: ci/console

CSCvw26544

Cisco ASA and FTD Software SIP Denial of Service Vulnerability

CSCvw27301

IKEv2 with EAP, MOBIKE status fails to be processed.

CSCvw28814

SNMP process crashed, resulting in Lina traceback

CSCvw30252

ASA/FTD may traceback and reload due to memory corruption in SNMP

CSCvw31569

Director/Backup flows are left behind and traffic related to this flow is blackholed

CSCvw32518

ASASM traceback and reload after upgrade up to 9.12(4)4 and higher

CSCvw36662

TACACS+ ASCII password change request not handled properly

CSCvw37259

VPN syslogs are generated at a rate of 600/s until device goes into a hang state

CSCvw37340

Vulnerability in the MySQL Server product of Oracle MySQL (component:

CSCvw37807

Ipsec Send Error Increasing When NTP Authenticate is Enabled

CSCvw42091

FTD/HA: "no shutdown" command disappear from running-config of standby

CSCvw42999

9.10.1.11 ASA on FPR2110 traceback and reloads randomly

CSCvw43486

ASA/FTD Traceback and reload during PBR configuration change

CSCvw43489

The NEEDBITS macro in the inflate_dynamic function in inflate.c for ...

CSCvw43508

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZ ...

CSCvw43510

Heap-based buffer overflow in the test_compr_eb function in Info-ZIP ...

CSCvw43529

Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25. ...

CSCvw43534

A Null pointer dereference vulnerability exists in Mozilla Network S ...

CSCvw43537

The recv_and_process_client_pkt function in networking/ntpd.c in bus ...

CSCvw43541

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to ...

CSCvw43543

The inflateMark function in inflate.c in zlib 1.2.8 might allow cont ...

CSCvw43544

The crc32_big function in crc32.c in zlib 1.2.8 might allow context- ...

CSCvw43546

In the add_match function in libbb/lineedit.c in BusyBox through 1.2 ...

CSCvw43555

A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.0 ...

CSCvw43559

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e5 ...

CSCvw43567

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file ...

CSCvw43571

An issue was discovered in BusyBox before 1.30.0. An out of bounds r ...

CSCvw43586

A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7 ...

CSCvw43615

An issue was discovered in GnuTLS before 3.6.15. A server can trigge ...

CSCvw44122

ASA: "class-default" class-map redirecting non-DNS traffic to DNS inspection engine

CSCvw45863

ASAv snmp traceback on reload

CSCvw46630

FTD: NLP path dropping return ICMP destination unreachable messages

CSCvw46702

FTD Cluster secondary units fail to join cluster due to application configuration sync timeout

CSCvw47321

IPSec transport mode traffic corruption for inbound traffic for some FPR platforms

CSCvw48517

DAP stopped working after upgrading the ASA to 9.13(1)13

CSCvw48829

Timezone in "show clock" is different from which in "show run clock"

CSCvw50679

ASA/FTD may traceback and reload during upgrade

CSCvw51307

ASA/FTD traceback and reload in process name "Lina"

CSCvw51462

IPv4 Default Tunneled Route Rejected

CSCvw51745

RIP database not populated with SLA monitored static route that was re added in the routing table.

CSCvw51950

FPR SSL trust-point removed from new active ASA after manual Failover

CSCvw51985

ASA: AnyConnect sessions cannot be resumed due to ipv6 DACL failure

CSCvw52083

The FXOS logrotate does not rotate properly all the log files

CSCvw52609

Cisco ASA and FTD Software Web Services Buffer Overflow Denial of Service Vulnerability

CSCvw53255

FTD/ASA HA: Standby Unit FXOS is still able to forward traffic even after failover due to traceback

CSCvw53427

ASA Fails to process HTTP POST with SAML assertion containing multiple query parameters

CSCvw53796

Cisco ASA and FTD Web Services Interface Cross-Site Scripting Vulnerability

CSCvw54640

FPR-4150 - ASA traceback and reload with thread name DATAPATH

CSCvw56703

IPv6 static routes not getting installed, upon changing ifc type management-only

CSCvw58414

Name of anyconnect custom attribute of type dynamic-split-exclude-domains is changed after reload

CSCvw59035

Connection issues to directly connected IP from FTD BVI address

CSCvw60177

Standby/Secondary cluster unit might crash in Thread Name: fover_parse and "cluster config sync"

CSCvw62526

ASA traceback and reload on engineering ASA build - 9.12.3.237

CSCvw62528

ASA failing to sync with IPv6 NTP server

CSCvw63862

ASA: Random L2TP users cannot access resources due to stale ACL filter entries

CSCvw64623

Standby ASA linkdown SNMPtrap sent from standby interface with active IP address

CSCvw68593

A flaw in the way reply ICMP packets are limited in the Linux kernel f

CSCvw71766

ASA traceback and reload in Thread: Ikev2 Daemon

CSCvw72260

ASA upgrade failed with: "CSP directory does not exist - STOP_FAILED Application_Not_Found"

CSCvw72608

Failed event for standby received on Active causes future deployments to be skipped on standby

CSCvw73402

Failed cluster copy capture to remote FTP renders the FTD LINA CLI unresponsive

CSCvw74940

ASA traceback in IKE Daemon and reload

CSCvw75104

Deployment failure on FDM-HA for port channel member interface changes

CSCvw75605

Connection Events Table View report fails when Domain, Count and any other field are selected.

CSCvw77930

ASA fails to process SAML assertion when tunnel-group name contains "."

CSCvw79208

Incorrect URL normalization when "http://" substring is at a latter stage in the input string

CSCvw79294

sftunnel logging huge number of logs to messages file

CSCvw81322

FTD running multi-instance mode gets snort GID 3 rules disabled after SRU install and deploy

CSCvw81897

ASA: OpenSSL Vulnerability CVE-2020-1971

CSCvw82577

Many small files as part of the Monet DB bloats up the size of the FMC backup tar file

CSCvw82629

ASA Tracebacks when making "configuration session" changes regarding an ACL.

CSCvw83572

BVI HTTP/SSH access is not working in versions 9.14.1.30 or above

CSCvw83665

Unable to deploy changes on FTD managed by FDM, post upgrade

CSCvw83780

FTD Firewall may traceback and reload when modifying ACLs

CSCvw84339

Managed device backup fails, for FTD, if hostname exceeds 30 characters

CSCvw84786

ASA traceback and reload on Thread name snmp_alarm_thread

CSCvw87788

ASA traceback and reload webvpn thread

CSCvw88176

MonetDB eventdb crash causes loss of connection events on FMC 6.6.1

CSCvw89365

ASA/FTD may traceback and reload during certificate changes.

CSCvw90151

PPPOE - ASA sends CONFACK for non-configured protocol

CSCvw90634

FP2100 ASA - 1 Gbps SFP in network module down/down after upgrade to 9.15.1.1

CSCvw91757

NAP dropping SNMPv3 traffic passing through FTDv after upgrade to 6.6.1

CSCvw93139

Cisco ASA and FTD Software for FP 1000/2100 Series Command Injection Vulnerability

CSCvw94988

S2S traffic fails due to missing V routes after Primary cluster unit gets disabled

CSCvw95301

ASA traceback and reload with Thread name: ssh when capture was removed

CSCvw96129

[IMS_7_0_0] Deploy after HA break fails on secondary with Lina Write Memory failed

CSCvw96488

Traceback in inspect_h323_ras+1810

CSCvw97256

Need handling of rmu read failure to ignore link state update when link state API read fails

CSCvw97267

DHCP client new IP address acquisition fails whenever there is a switchport flap

CSCvw97821

ASA: VPN traffic does not pass if no dACL is provided in CoA

CSCvw98315

FXOS reporting old FTD version after FTD upgrade to 6.7.0

CSCvw98603

Multiple vulnerabilities in SQlite

CSCvw98840

ASA: dACL with no IPv6 entries is not applied to v6 traffic after CoA

CSCvw99916

ASAv: SNMP result for used memory value incorrect after upgrade to 9.14

CSCvx00655

ASA/SFR service card failure due to timeout getting CriticalStatus from PM

CSCvx01805

AppAgent gets deregistered due to hearbeat failure during config sync up on Firepower 2100s

CSCvx02869

Traceback in Thread Name: Lic TMR

CSCvx03764

Offload rewrite data needs to be fixed for identity nat traffic and clustering environment

CSCvx04057

When SGT name is unresolved and used in ACE, line is not being ignored/inactive

CSCvx04643

ASA reload is removing 'content-security-policy' config

CSCvx05381

Cisco ASA and FTD Software Command Injection Vulnerability

CSCvx05385

ASA may generate a traceback in Logger thread during configuration sync in HA

CSCvx05956

High snort cpu usage while copying navl attribute

CSCvx06385

Fail-to-wire ports in FPR 2100 flapping after upgrade to 6.6.1

CSCvx08734

ASA: default IPv6/IPv4 route tunneled does not work

CSCvx09147

sftunnel fsync does not handle empty files and shows memory leak

CSCvx09248

SNMP walk for v2 and v3 fails with No Such Object available on this agent at this OID is seen

CSCvx09535

ASA Traceback: CRL check for an Anyconnect client with a revoked certificate triggers reload

CSCvx10110

Last transaction timestamp status "unknown" for active LDAP AAA server

CSCvx10502

In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.

CSCvx10514

An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple in

CSCvx10519

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure

CSCvx10520

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of na

CSCvx10555

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker

CSCvx10841

Not able to Advertise/Redistribute VXLAN/VNI interface subnet using EIGRP

CSCvx11295

ASA may traceback and reload on thread Crypto CA

CSCvx11460

Firepower 2110 silently dropping traffic with TFC enabled on the remote end

CSCvx13694

ASA/FTD traceback in Thread Name: PTHREAD-4432

CSCvx13835

Multiple vulnerabilities in bind

CSCvx14031

IPv4 DACL stuck on Active device when DACL removed after CoA for IKEv2 Session, traffic not impacted

CSCvx15040

DHCP Proxy Offer is getting drop on the ASA/FTD

CSCvx16202

self referenced object pushed from FMC results in lina crash with error - loop in grp hierarchy

CSCvx16317

Failure accessing FXOS with connect fxos admin from Multi-Context ASA if admin context is changed

CSCvx16592

FTD doesn't redirect packets to the WCCP web-cache engine when VRF's are configured

CSCvx16700

FXOS clock sync issue during blade boot up due to "MIO DID NOT RESPOND TO FORCED TIME SYNC"

CSCvx17664

ASA may traceback and reload in Thread Name 'webvpn_task'

CSCvx17780

FPR-2100-ASA : SNMP Walk for ifType is showing "other" for ASA interfaces in the latest versions

CSCvx17785

Traceback seen when adding/removing acl & entering into route-map command (pbr_route_map_update)

CSCvx17842

Prevent lina from traceback due to object loop sent by FMC. Fail the deployment instead.

CSCvx19934

Deployment gets failed for snmp settings while deleting snmpv1 and adding snmpv3 at a time in 6.6.3

CSCvx20303

ASA/FTD may traceback in after changing snmp host-group object

CSCvx20692

Only ten objects are seen under Smart CLI when all objects have the same type

CSCvx20872

ASA/FTD Traceback and reload due to netflow refresh timer

CSCvx21782

Firepower platforms generate corrupted coredump due to lina monitor

CSCvx22695

ASA traceback and reload during OCSP response data cleanup

CSCvx23833

IKEv2 rekey - Invalid SPI for ESP packet using new SPI received right after Create_Child_SA response

CSCvx23907

Evaluate the impact of NGFW for CVE-2021-1405

CSCvx24537

SAML: SAML Authentication may fail if we have 2 or more IDP certs with same Subject Name

CSCvx25406

LINA silently drops packet if the MTU of the packet is of size > the MTU of egress interface

CSCvx25719

X-Frame-Options header is not set in webvpn response pages

CSCvx25836

ASA traceback & reload due to "show crashinfo" adding a new output log

CSCvx26221

Traceback into snmp at handle_agentx_packet / snmp takes long time to come up on FP1k and 5508

CSCvx26308

ASA traceback and reload due to strcpy_s: source string too long for dest

CSCvx26525

FMC was upgraded to 6.6.1 Post this we noticed that on FTD Devices - snmp configuration is missing

CSCvx26808

FTD traceback and reload on process lina on FPR2100 series

CSCvx26927

TLS site not loading when it has segmented and retransmitted CH

CSCvx27077

SAML: Prevent webvpn saml IDP config removal when it is referenced under tunnel-group

CSCvx27430

ASA: Unable to import PAC file if FIPS is enabled.

CSCvx27914

Unable to see events under Geolocation widgets FMC

CSCvx28520

SSL decryption failure using customer SSL rule with DKK

CSCvx29429

ma_ctx*.log consuming high diskspace on FPR4100/FPR9300 despite the fix for CSCvx07389

CSCvx29448

FTD: SNMP host configured with diagnostic int able to poll management int

CSCvx29771

Firewall CPU can increase after a bulk routing update with flow offload

CSCvx29814

IP address in DHCP GIADDR field is reversed after sending DHCP DECLINE to DHCP server

CSCvx29832

CPU performance degrade with lots of route updates with flow offload enabled

CSCvx30314

ASA traceback and reload in ssl midpath

CSCvx33822

No option to deploy ASAv with 4gb RAM and 2 CPU

CSCvx33904

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privile

CSCvx34237

ASA reload with FIPS failure

CSCvx34335

AAA LDAP Server: Average round trip time is always 0ms

CSCvx37737

HA failure due to OSPF NSF after HA break and upgrade to 6.6.0/6.6.1

CSCvx38124

Core-local block alloc failure on cores where CP is pinned leading to drops

CSCvx41171

Concurrent modification of ACL configuration breaks output of "show running-config" completely

CSCvx41440

URL reputation mismatch between Talos cloud and local DBs.

CSCvx42081

FPR4150 ASA Standby Ready unit Loops to failed and remove config to install it again

CSCvx42197

ASA EIGRP route stuck after neighbour disconnected

CSCvx44117

Addition of new net-snmp patches and cleaning up unused net-snmp recipes

CSCvx44401

FTD/ASA traceback in Thread Name : Unicorn Proxy Thread

CSCvx45976

ASA/FTD Watchdog forced traceback and reload in Threadname: vnet-proxy (rip: socks_proxy_datarelay)

CSCvx47230

X-Frame-Options header support for older versions of IE and windows platforms

CSCvx47628

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion

CSCvx47634

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and

CSCvx47642

An integer underflow was discovered in OpenLDAP before 2.4.57 leading

CSCvx48490

SSL Decrypted https flow EOF events showing 'Initiator/Responder' Packets as 0

CSCvx49715

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may

CSCvx49716

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before

CSCvx49720

BIND servers are vulnerable if they are running an affected version an

CSCvx50366

Traceback in Thread Name: fover_health_monitoring_thread

CSCvx52122

ASA traceback and reload in SNMP Notify Thread while deleting transparent context

CSCvx54235

ASP capture dispatch-queue-limit shows no packets

CSCvx54396

Intermittent policy deployment failure when multicast routing is enabled

CSCvx54606

FTD 6.6.1/6.7.0 is sending SNMP Ifspeed OID (1.3.6.1.2.1.2.2.1.5) response value = 0

CSCvx54934

Intrusion Event Report Generation fails when using Inline Result with graph format

CSCvx56323

Edit of S2S VPN fails with error "Node not found: 12884908935"

CSCvx57417

Smart Tunnel Code signing certifcate renewal

CSCvx59120

COA Received before data tunnel comes up results in tear down of parent session

CSCvx61200

TID feeds stuck due to references leak

CSCvx62239

Need comprehensive details in logs on what is stopping VPN load-balancing cluster formation

CSCvx63256

Error when entering expert mode on FTD/ 4110 after upgrade to 6.6.3 from 6.2.3

CSCvx63647

ASA traceback and reload on Thread Name: CTM Daemon

CSCvx64478

Unwanted console output during SAML transactions

CSCvx65467

663 FDM not sending syslog events after configuration changes

CSCvx65745

FPR2100: enable kernel panic on octeon for UE events to trigger crash

CSCvx67996

FMC RAVPN: Deployment is failing when IPv6 DNS is configured under Group Policy

CSCvx68128

ASA internal deadlock leads to loss of feature functionality (syslogs, reload, ASDM, anyconnect)

CSCvx68355

ASA - unable to import CA certificate when countryName is encoded as UTF8

CSCvx68490

FDM upgrade fails on 100_ftd_onbox_data_import.sh due to deleted SSL URL categories

CSCvx68951

ASA responds with "00 00 00 00 00 00" when polling interface physical address using snmp

CSCvx69405

ASA Traceback and reload in Thread Name: SNMP ContextThread

CSCvx71434

ASA/FTD Traceback and reload in Thread Name: pix_startup_thread due to asa_run_ttyS0 script

CSCvx71571

ASA: "ERROR: Unable to delete entries from Hash Table" with CSM

CSCvx72904

Optimise ifmib polls

CSCvx73164

Lasso SAML Implementation Vulnerability Affecting Cisco Products: June 2021

CSCvx74035

ASA traceback and reload after run "clear configure all" with multiple ACLs and objects configured

CSCvx75503

Re-transmitted SYN are not inspected by inspection engine

CSCvx75963

ASA traceback while taking captures

CSCvx76703

FMC won't save prefilter policy changes if a rule is matching traffic by Interface Group

CSCvx77768

Traceback and reload due to Umbrella

CSCvx78238

multi context Firepower services on ASA traffic goes to incorrect interfaces

CSCvx79793

Slow file transfer or file upload with SSL policy is applied with Decrypt resign action

CSCvx80835

Manual enrollment creates stuck pending trustpoint entry in LINA after importing certificate

CSCvx81405

Connections expected to match known key rules may not be decrypted

CSCvx85534

SNMP traps being sent out sourced with unexpected IP from the data interface

CSCvx85922

ASA/FTD may traceback and reload when saving/writitng the configuration to memory

CSCvx86177

inet6_ntoa and unix_timestamp Functions used to externally poll FMC database return errors

CSCvx87679

Failover license count not synced to standby firewall.

CSCvx87709

FPR 2100 running ASA in HA. Traceback and reload on watchdog during failover

CSCvx87790

FPR 2100 running ASA in HA. Traceback and reload on watchdog during failover

CSCvx88683

ASA not replicating BGP password correctly to standby unit

CSCvx89827

Not able to set Bangkok time zone in FPR 2110

CSCvx91341

An issue was discovered in GNOME GLib before 2.66.8. When g_file_repla

CSCvx94326

VPN Load Balancing may get stuck and disconnect from the group

CSCvx94398

Secondary ASA could not get the startup configuration

CSCvx95255

Supportive change in ASA to differentiate, new ASDM connections from existing ASDM context switch

CSCvx97632

ASA traceback and reload when copying files with long destination filenames using cluster command

CSCvx98041

FTD-API: ruleId duplicate sequence number causes invalid snort ngfw.rules to be deployed

CSCvx99373

FMC: "beakerd" process core files not archiving debug symbols hence unusable

CSCvy01752

Traceback on FPR 4115 in Thread - Lic HA Cluster

CSCvy02448

Time sync do not work correctly for ASA on FPFPR2100 series platform

CSCvy02703

ASA/FTD tracebacks due to CTM message handler

CSCvy03006

improve debugging capability for uauth

CSCvy03045

Failure accessing FXOS with connect fxos admin from Multi-Context ASA if admin context is changed

CSCvy03907

Creation/Edit of Access Control Policy fails with error 'Rule Name Already Exists'

CSCvy04869

AnyConnect certificate authentication fails if user certificate has 8192 bits key size

CSCvy04965

WM Standby fails to re-join HA with msg "CD App Sync error is Failed to apply SSP config on standby"

CSCvy05807

Observed SNMPWalk Failure after FO Sync operation.

CSCvy05966

Snort 2.9.16.3-3033 traceback (FTD 6.6.3)

CSCvy07491

ASA traceback when re-configuring access-list

CSCvy07654

FTD: Failover role change when generating TS files due to after ndclientd missing heartbeats

CSCvy08908

Port-forwarding application blocked by Java

CSCvy09217

HA goes to active-active state due to cipher mismatch

CSCvy09252

Syncd exits repeatedly on secondary FMC part of FMC HA

CSCvy10665

Firepower 9000 Series SM-56 missing filespec entry for YYYY-MM-DD files in diskmanager

CSCvy13229

FDM - GUI Inaccessible - tomcat is opening too many file descriptors

CSCvy17365

REST API Login Page Issue

CSCvy17470

ASA Traceback and reload on the A/S failover pair at IKEv2.

CSCvy19453

SFDataCorrelator performance problems involving redundant new host events with only MAC addresses

CSCvy30016

"Max cert cache entries" pruning needs to lock the ssl cache

CSCvy34333

When ASA upgrade fails, version status is desynched between platform and application

CSCvy37835

ssl replace key only action can cause unbounded detection engine memory usage

CSCvy39191

An internal server error 500 in T-ufin when doing API calls to the FMC

CSCvy39659

ASA/FTD may traceback and reload in Thread Name 'DATAPATH-15-14815'

CSCvy40482

9.14MR3: snmpwalk got failed with [Errno 146] Connection refused error.

CSCvy61008

Time out of sync between Lina and FXOS

CSCvy83116

WM standby fails to re-join HA with msg "CD App Sync error is SSP Config Generation Failure"

CSCvu84127

Firepower may reboot for no apparent reason

CSCvy15046

Upgrade from 6.6.3.81 to 6.6.4.59 failed at 000_start/125_verify_bundle.sh - Failure unpacking

CSCvx86231

FMC upgrade failure to 6.6.3 on 999_finish/935_change_reconciliation_baseline.pl

CSCuw51499

TCM doesn't work for ACE addition/removal, ACL object/object-group edits

CSCvf88062

CTM: Nitrox S/G lengths need to be validated

CSCvg69380

ASA - rare cp processing corruption causes console lock

CSCvg73237

ENH: Configure CAC as an absolute value as well instead of just percentage of total VPN capacity.

CSCvh75756

Duplicate preprocessor keyword: ssl

CSCvm82290

ASA core blocks depleted when host unreachable in IRB/TFW configuration

CSCvn12453

Implement debug menu command to show RX ring number a flow is hashed to

CSCvo11165

Language translation table for webvpn should be updated

CSCvo34210

ASA running 9.6.4.20 Traceback in threadname Unicorn Proxy Thread

CSCvo57004

Analyze Hit Counts displaying timestamps in UTC instead of the configured user time zone.

CSCvp10079

DB switch role failed on FMC HA switch

CSCvp47536

AAA requests on FTD not following V-routes learned from RRI

CSCvq47743

AnyConnect and Management Sessions fail to connect after several weeks

CSCvq81410

ASA::Unable to execute any ASA command via http using safari browser.

CSCvr02310

Server Hello is dropped when TLS1.3 is the only accepted TLS version with DND rule

CSCvr33428

FMC generates Connection Events from a SYN flood attack

CSCvr35872

ASA traceback Thread Name: DATAPATH-0-1388 PBR 9.10(1)22

CSCvr55741

FMC shows policies out of date after successful deploy

CSCvr85295

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote

CSCvs07922

Active ASA generates logging messages with incorrect IP for WebVPN with IPv6

CSCvs13204

ASAv failover traffic on SR-IOV interfaces might be dropped due to interface-down

CSCvs47365

Event rate seen on FMC slows down or stops coming from devices using FXOS 2.9.1 update

CSCvs50274

ASA5506 to the box icmp request packets intermittently dropped

CSCvs68576

Deploy failure when deleting auto nat rule due to double negate

CSCvs71969

Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability

CSCvs72378

ASDM session being abruptly terminated when switching between different contexts

CSCvs72450

FXOS - Recover hwclock of service module from corruption due to simultaneous write collision

CSCvs79606

"dns server-group DefaultDNS" cli not getting negated

CSCvs81763

vFTD not able to pass vlan tagged traffic (trunk mode)

CSCvs84542

ASA traceback with thread: idfw_proc

CSCvs85196

ASA SIP connections drop after several consecutive failovers: pinhole timeout/closed by inspection

CSCvs85595

awk:fatal msg getting displayed while unit is syncing

CSCvs91270

Inspect Interruption - Error in deployment page.

CSCvs91389

FTD Traceback Lina process

CSCvs99356

Snort2: on SSP platforms large files download takes time with ssl policy configured

CSCvt00255

Upgrade kernel to cpe:2.3:o:linux:linux_kernel:4.14.187:

CSCvt01938

show ntp asking the password to get the output

CSCvt04560

SCTP heartbeats failing across the firewall in Cluster deploymnet.

CSCvt09940

Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability

CSCvt11302

On FPR devices when FIPS is enabled cannot create webtype ACLs

CSCvt13822

ASA: VTI rejecting IPSec tunnel due to no matching crypto map entry

CSCvt15056

SFR managed by ASDM: System policy does not apply.

CSCvt15163

Cisco ASA and FTD Software Web Services Information Disclosure Vulnerability

CSCvt17912

stress, pushing platform limits causing segfault/reload in lina_free_exec_st

CSCvt18199

IPv6 Nat rejected with error "overlaps with inside standby interface address" for Standalone ASA

CSCvt22356

Health-check monitor-interface debounce-time in ASA Cluster resets to 9000ms after ASA reboot

CSCvt26530

FTD failed over due to 'Inspection engine in other unit has failed due to snort failure'

CSCvt27585

Observed traceback on 2100 while performing Failover Switch from Standby.

CSCvt29771

invalid Response message when we change the security zone from the object management page

CSCvt31292

FTD device might not send events to SSE

CSCvt33785

IPSec SAs are not being created for random VPN peers

CSCvt34973

SFNotificationd may cause excessive logging in 'messages' files

CSCvt39292

LDAPS External users can't 'sudo su' on Firepower 4110

CSCvt40306

ASA:BVI interface of standby unit stops responding after reload

CSCvt41357

"no logging permit-hostdown" does not block connections when syslog host is inaccessible

CSCvt42610

Observed memory leak during SNMP polling

CSCvt43136

Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability

CSCvt48260

Standby unit traceback at fover_parse and boot loop when detecting Active unit

CSCvt48601

Cisco Firepower Manament Center Software Stored Cross-Site Scripting Vulnerability

CSCvt56923

FTD manual certificate enrollment fails with "&" (ampersand) in Organisation subject field

CSCvt61196

ASA on multicontext mode, deleting a context does not delete the SSH keys.

CSCvt61370

Events may stop coming from a device due to a communication deadlock

CSCvt64952

"Show crypto accelerator load-balance detail" has missing and undefined output

CSCvt66875

AppId caches proxy IP instead of tunneled IP for ultrasurf

CSCvt69260

connection event shows old device name

CSCvt70664

ASA: acct-session-time accounting attribute missing from Radius Acct-Requests for AnyConnect

CSCvt70854

6.6.0-90: [Firepower 1010] Tomcat restarted during SRU update because of out of memory

CSCvt70879

"clear configure access-list" on ACL used for vpn-filter breaks access to resources

CSCvt71529

ASA traceback and reload during SSL handshake

CSCvt72683

NAT policy configuration after NAT policy deployment on FP 8130 is not seen

CSCvt73407

TACACS Fallback authorization fails for Username enable_15 on ASA device.

CSCvt75760

Traceback/Page-fault in Clientless WebVPN due to HTTP cleanup

CSCvt76688

The syslog message 201008 should include reason of drop when TCP server is down

CSCvt80134

WebVPN rewriter fails to parse data from SAP Netweaver.

CSCvt80172

Supervisor software needs to be upgraded to address CVE-2017-11610

CSCvt86467

c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mcha

CSCvt87074

Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.

CSCvt88454

using Clientless portal, there is a character string that does not match the set language

CSCvt89183

FDM unable to load CA signed certificate via Management Web Server

CSCvt89790

Setting "snmp-server location" sets same value for "snmp-server contact" as well on ASA 9.14.1

CSCvt92077

Ping Failure on ASAv - 9.13 after CAT9k reboot

CSCvt95176

readfilemap.c in expat before 2.1.0 allows context-dependent attackers

CSCvt97205

SNMPPOLL/SNMPTRAP to remote end (site-to-site vpn) ASA interface fails on ASA 9.14.1

CSCvt99020

Cisco Firepower Manament Center Software Stored Cross-Site Scripting Vulnerability

CSCvt99137

With huge FTP traffic in cluster, the SEC_FLOW messages are in a retransmit loop

CSCvu06767

Lina cores on multi-instance causing a boot loop on both logical-devices

CSCvu08339

FTD Inline-set bridge group ID set to 0 with tap-mode off

CSCvu16423

ASA 9.12(2) - Multiple tracebacks due to Unicorn Proxy Thread

CSCvu17819

Upgrade to 6.7.0 for SSH RBAC on vFTD is failing

CSCvu17852

Current connection count is negative on 'show service policy' when connection limit is set in MPF

CSCvu23539

Inner Flow: LU flag3 overlap

CSCvu27287

Scheduled Backup failing over SCP via EEM

CSCvu27868

ASA: Lack of specific syslog messages to external IPv6 logging server after ASA upgrade

CSCvu29660

Block exhaustion snapshot not created when available blocks goes to zero

CSCvu30756

User Identity does not correctly handle identical sessions in different netmaps

CSCvu32449

FDM: AnyConnect "Validation failed due to duplicate name:"

CSCvu33591

FPWR 4100 - Snort down due to corrupt files under /var/sf/fwcfg/

CSCvu33992

traceback: ASA reloaded lina_sigcrash+1394

CSCvu35768

After upgrade FMC from 6409-59 to 6.6.0-90 unable to log UI using Radius external user in subdomain.

CSCvu36302

%ASA-3-737403 is used incorrectly when vpn-addr-assign local reuse-delay is configured

CSCvu40834

Fix merge damage for calendar update on native SSP platforms

CSCvu43355

FTD Lina traceback in datapath due to double free

CSCvu43827

ASA & FTD Cluster unit traceback in thread Name "cluster config sync" or "fover_FSM_thread"

CSCvu44135

syslog 710004 not generated when SSH management connection limit exceeded

CSCvu45822

ASA experienced a traceback and reloaded

CSCvu48285

ASA configured with TACACS REST API: /cli api fail with "Command authorization failed" message

CSCvu48886

FTD deployment failure when removing non-default "crypto ikev2 limit max-in-negotiation-sa"

CSCvu55469

FTD - Connection idle timeout doesn't reset

CSCvu58153

Display RADIUS port representation as little-endian instead of big-endian

CSCvu59573

Group-URL starting with "admin" does not work properly

CSCvu63397

Integer overflow (in FileExtract Health Alert) causes log spam "file capture perf stats"

CSCvu68529

Embryonic connections limit does not work consistently

CSCvu70931

Cluster / aaa-server key missing after "no key config-key" is entered

CSCvu71324

ASA: Automatic DENY rule applied in multiple contexts due to the use of the dhcp-network-scope

CSCvu75315

Report does not show intrusion events on bar and pie charts after upgrade to 6.6.0

CSCvu79102

FTD-API/FDM: HA Synchronization Status Fails on Standby

CSCvu82272

Upgrade on Firepower Management Center may fail due to inactive stale entries of managed devices

CSCvu82738

The drop rate in show interface for inline sets is incorrect

CSCvu83389

ASA drops GTPV1 Forward relocation Request message with Null TEID

CSCvu84066

bfd map source address with /32 mask is not working

CSCvu85381

HA Re-formation fails following a policy deploy failure on standby

CSCvu85421

deployment failure with the message: no crypto map s2sCryptoMap interface inside

CSCvu89110

ASA: Block new conns even when the "logging permit-hostdown" is set & TCP syslog is down

CSCvu93278

Observed crash in KP while working on AnyConnect-IKEv2 scaled connections.

CSCvu93834

FDM/FTD-API: Password cannot be changed on standby for the admin user

CSCvu95109

KVM/KP FDM upgrade from 6.6 - 6.7.0 failed due to diskspace. /ngfw/var/cisco/deploy/fdm

CSCvu97764

FTD in TAP mode won't capture on egress interfaces

CSCvu98222

FTD Lina engine may traceback in datapath after enabling SSL decryption policy

CSCvu98468

SDI: SDI File doesn't get synced to the standby if new device joins in Failover

CSCvu98505

ASA licensed via PLR does not have 'export-controlled functionality enabled' flag set correctly

CSCvu98780

FTD-API: CDO template apply is triggering rule delete bug

CSCvv02245

ASA 'session sfr' command disconnects from FirePOWER module for initial setup

CSCvv02925

OSPF neighbourship is not establising

CSCvv04023

FDM (On box manager)Traffic not hit in the proper rule because interface is removed from zones.conf

CSCvv04441

ngfw.rules mismatch between Primary and Secondary FTD HA when RA-VPN is configured before upgrade

CSCvv04584

Multicast traffic is being dropped with the resson no-mcast-intrf

CSCvv07864

Multicast EIGRP traffic not seen on internal FTD interface

CSCvv08244

Firepower module may block trusted HTTPS connections matching 'Do not decrypt' SSL decryption rule

CSCvv08684

Cluster site-specific MAC addresses not rewritten by flow-offload

CSCvv09396

Stale VPN routes for L2TP, after the session was terminated

CSCvv09477

Vulnerability in the MySQL Server product of Oracle MySQL (component:

CSCvv10778

Traceback in threadname DATAPATH (5585) or Lina (2100) after upgrade to 9.12.4

CSCvv12857

ASA gets frozen after crypto engine failure

CSCvv14621

Reword the error message displayed in case of command replication timeout in cluster

CSCvv15572

ASA traceback observed when "config-url" is entered while creating new context

CSCvv16082

stress/low memory: assert: mh->mh_mem_pool > MEMPOOL_UNDEFINED && mh->mh_mem_pool < MEMPOOL_MAX_TYPE

CSCvv17585

Netflow template not sent under certain circumstances

CSCvv19230

ASAv Anyconnect users unexpectedly disconnect with reason: Idle Timeout

CSCvv19573

Deployment is failed when an interface associated in static route update with management-only

CSCvv20405

WEBVPN: ERROR: Invalid tunnel group name on Multi-Context ASA

CSCvv20450

FMC 6.4 to 6.7 upgrade fails "Error running script 500_rpms/110_generate_dbaccess.sh"

CSCvv21045

Database may stop accepting new connections causing event processing to stop

CSCvv22208

In onbox mode, zones.conf didn't roll back when deployment fails

CSCvv23370

Observed traceback in FPR2130 while running webVPN, SNMP related traffic.

CSCvv25394

After upgrade ASA swapped names for disks, disk0 became disk1 and vice versa.

CSCvv25839

reCAPTCHA is not working when SSl decryption is enable.

CSCvv26683

"configure high-availability disable" command when executed from CLI causes exception in next HAJoin

CSCvv28997

ASA Traceback and reload on thread name Crypto CA

CSCvv29687

Rate-limit syslogs 780001/780002 by default on ASA

CSCvv31629

Intermittently embedded ping reply over GRE drops on FTD cluster if traffic passes asymmetrically.

CSCvv32425

ASA traceback when running show asp table classify domain permit

CSCvv34003

snmpwalk for OID 1.3.6.1.2.1.47.1.1.1.1.5 on ISA 3000 returning value of 0 for .16 and .17

CSCvv34140

ASA IKEv2 VTI - Failed to request SPI from CTM as responder

CSCvv36518

ASA: Extended downtime after reload after CSCuw51499 fix

CSCvv36725

ASA logging rate-limit 1 5 message ... limits to 1 message in 10 seconds instead of 5

CSCvv36915

"Show NTP" command does not work on multi-instance FTD

CSCvv37108

ASA silently dropping OSPF LS Update messages from neighbors

CSCvv37629

Malformed SIP packets leads to 4k block hold-up till SIP conn timeout causing probable traffic issue

CSCvv40195

Syslog trap is missing log content

CSCvv40316

FDM - Unable to add the BGP 11th neighbor using smart CLI routing object

CSCvv40916

3 min delay caused by AbstractBaseDeploymentValidationHandler.validatePreApply during deploy.

CSCvv40961

http-proxy setting causing upgrade failure

CSCvv41453

Removing static ipv6 route from management-only route table affects data traffic

CSCvv43484

ASA stops processing RIP packets after system upgrade

CSCvv43771

Unable to select multiple devices for scheduled backups

CSCvv43864

Preview change log is blank when changes are made to the policy

CSCvv43885

'show sctp' command is unavailable when carrier license is out of compliance

CSCvv44051

Cluster unit traceback on snp_cluster_forward_and_free_packet due to GRE/IPiniP passenger flows

CSCvv44270

ASAv5 reloads without traceback.

CSCvv45106

CSD does not start on 2100 due to missing csd-service.json file

CSCvv46490

Policy Deployment Failure on FMC due to ERROR in SnortAttribConfig

CSCvv48594

Memory leak: due to snp_tcp_intercept_stat_top_n_integrate() in threat detection

CSCvv49698

ASA Anyconnect url-redirect not working for ipv6

CSCvv49800

ASA/FTD: HA switchover doesn't happen with graceful reboot of firepower chassis

CSCvv50338

Traceback Cluster unit on snpi_nat_xlate_destroy+2508

CSCvv51623

Manual-NAT-rule is moved to before-auto-nat-section inLina's running config after deployment.

CSCvv52591

DMA memory leak in ctm_hw_malloc_from_pool causing management and VPN connections to fail

CSCvv53696

ASA/FTD traceback and reload during AAA or CoA task of Anyconnect user

CSCvv54831

ASA traceback and reload when running Packet Tracer commands

CSCvv55066

FPR1010: Internal-Data0/0 and data interfaces are flapping during SMB file transfer

CSCvv55271

REST API to fetch Audit logs from FMC returns only the first 25 entries with or without startIndex

CSCvv57476

CSS Styles loading issue in Chrome 85, IE and Edge browsers

CSCvv57590

ASA: ACL compilation takes more time on standby

CSCvv57842

WebSSL clientless user accounts being locked out on 1st bad password

CSCvv58332

ASA/FTD is reading BGP MP_REACH_NLRI attribute's next-hop bytes in reverse order

CSCvv58604

Reset not sent when traffic matches AC-policy configured with block/reset and SSL inspection

CSCvv58605

ASA traceback and reload in thread:Crypto CA,mem corruption by unvirtualized pki global table in MTX

CSCvv59676

Snort2: Implement aggressive pruning for certificate cache for TLS to free up memory

CSCvv60849

Memory cgroup limits should be adjusted to avoid Snort D-state

CSCvv62305

ASA traceback and reload in fover_parse when attempting to join the failover pair.

CSCvv62931

FTD does not send Server Hello & Server Certificate to the client when src.port==dst.port

CSCvv63208

ASA 5506/5508 - SNMP polling fails following reboot but restores after some time

CSCvv63227

SLA stopped working on upgraded setup

CSCvv63412

ASA dropping all traffic with reason "No route to host" when tmatch compilation is ongoing

CSCvv66005

ASA traceback and reload on inspect esmtp

CSCvv66920

Inner flow: U-turn GRE flows trigger incorrect connection flow creation

CSCvv67398

Inspect-snmp drops thru-the-box snmp paks if snmp is disabled

CSCvv67500

ASA 9.12 random traceback and reload in DATAPATH

CSCvv67754

Memory calculations are producing incorrect results leading to higher memory usage in snort.

CSCvv69015

CSD does not respond to Troubleshoot requests on 6.6.X

CSCvv69991

FTD stuck in Maintenance Mode after upgrade to 6.6.1

CSCvv70096

Snort 2: Memory Leak in SSL Decrypt & Resign Processing

CSCvv72466

OSPF network commands go missing in the startup-config after upgrading the ASA

CSCvv73017

Traceback due to fover and ssh thread

CSCvv73540