{"metadata": {"vulnerability": "cve-2023-20042", "count": 25, "kinds": {"milestone": 7, "sighting": 2, "kev": 0, "other": 16}}, "data": [{"timestamp": "2022-10-27T18:47:50.316Z", "date_only": false, "value": "2022-10-27T18:47:50.316Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-20042", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-01T16:00:00Z", "date_only": false, "value": "2023-11-01T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "record": "CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-01T16:00:00Z", "date_only": false, "value": "2023-11-01T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "record": "CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-11-01T16:00:00Z", "date_only": false, "value": "2023-11-01T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "record": "CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-01T16:00:08Z", "date_only": false, "value": "2023-11-01T16:00:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "record": "CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-01T17:11:08.109Z", "date_only": false, "value": "2023-11-01T17:11:08.109Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-20042", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-01T18:15:08Z", "date_only": false, "value": "2023-11-01T18:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2C63-FQW2-3FHM", "record": "GHSA-2C63-FQW2-3FHM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-01T18:15:08.843Z", "date_only": false, "value": "2023-11-01T18:15:08.843", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20042", "record": "FKIE_CVE-2023-20042", "field": "published"}, {"timestamp": "2023-11-01T18:15:08.843Z", "date_only": false, "value": "2023-11-01T18:15:08.843", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-20042", "record": "GSD-2023-20042", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-11-01T18:30:33Z", "date_only": false, "value": "2023-11-01T18:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2C63-FQW2-3FHM", "record": "GHSA-2C63-FQW2-3FHM", "field": "published"}, {"timestamp": "2023-11-01T18:30:33Z", "date_only": false, "value": "2023-11-01T18:30:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2C63-FQW2-3FHM", "record": "GHSA-2C63-FQW2-3FHM", "field": "modified"}, {"timestamp": "2023-11-01T21:22:15Z", "date_only": false, "value": "2023-11-01T21:22:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/73380", "record": "CVE-2023-20042", "field": "creation_timestamp", "uuid": "632b86e9-319a-4f82-8213-9faf9fb45045", "content": "\u203c CVE-2023-20042 \u203c\n\nA vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an implementation error within the SSL/TLS session handling process that can prevent the release of a session handler under specific conditions. An attacker could exploit this vulnerability by sending crafted SSL/TLS traffic to an affected device, increasing the probability of session handler leaks. A successful exploit could allow the attacker to eventually deplete the available session handler pool, preventing new sessions from being established and causing a DoS condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/73380"}, {"timestamp": "2023-11-01T23:00:00Z", "date_only": false, "value": "2023-11-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2812", "record": "WID-SEC-W-2023-2812", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-01T23:00:00Z", "date_only": false, "value": "2023-11-01T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2812", "record": "WID-SEC-W-2023-2812", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-01T23:00:00Z", "date_only": false, "value": "2023-11-01T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2812", "record": "WID-SEC-W-2023-2812", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-11-01T23:00:00Z", "date_only": false, "value": "2023-11-01T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2812", "record": "WID-SEC-W-2023-2812", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-22T15:29:04Z", "date_only": false, "value": "2023-11-22T15:29:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/352", "record": "CVE-2023-20042", "field": "creation_timestamp", "uuid": "533496cc-5cb4-48b0-95df-48fd594281c9", "content": "#ExploitObserverAlert\n\nCVE-2023-20042\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-20042. A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an implementation error within the SSL/TLS session handling process that can prevent the release of a session handler under specific conditions. An attacker could exploit this vulnerability by sending crafted SSL/TLS traffic to an affected device, increasing the probability of session handler leaks. A successful exploit could allow the attacker to eventually deplete the available session handler pool, preventing new sessions from being established and causing a DoS condition.\n\nFIRST-EPSS: 0.000630000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/352"}, {"timestamp": "2023-12-13T01:20:27.960Z", "date_only": false, "value": "2023-12-13T01:20:27.960072Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-20042", "record": "GSD-2023-20042", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-25T16:57:36.733Z", "date_only": false, "value": "2024-01-25T16:57:36.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "cve-2023-20042", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-25T17:15:26.963Z", "date_only": false, "value": "2024-01-25T17:15:26.963", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-20042", "record": "GSD-2023-20042", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-08-02T08:57:35.839Z", "date_only": false, "value": "2024-08-02T08:57:35.839Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-20042", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T08:57:35.839Z", "date_only": false, "value": "2024-08-02T08:57:35.839Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-20042", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:00:58.786Z", "date_only": false, "value": "2024-08-15T18:00:58.786+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2812", "record": "WID-SEC-W-2023-2812", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-13T15:42:50Z", "date_only": false, "value": "2025-10-13T15:42:50+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "record": "CISCO-SA-ASAFTD-SSL-DOS-KXG8MPUA", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-11T19:33:44.513Z", "date_only": false, "value": "2026-08-11T19:33:44.513", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20042", "record": "FKIE_CVE-2023-20042", "field": "lastModified"}]}