CVE-2020-3195: 
Cisco Adaptive Security Appliance (ASA) vulnerability analysis and mitigation

A vulnerability (CVE-2020-3195) was identified in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software. The vulnerability was discovered in December 2019 and publicly disclosed in May 2020. This security flaw affects the OSPF packet processing functionality in these Cisco security products (CVE Mitre).

The vulnerability stems from incorrect processing of certain OSPF packets in the affected Cisco products. When exploited, it causes a memory leak condition in the device. The issue has been assigned a high severity rating, with attackers being able to trigger the vulnerability through specially crafted OSPF packets (SecurityWeek).

The successful exploitation of this vulnerability could allow an unauthenticated, remote attacker to cause continuous memory consumption on an affected device. This memory leak can eventually lead to device reload, resulting in a denial of service (DoS) condition (CVE Mitre).

The vulnerability can be exploited by sending a series of crafted OSPF packets to be processed by an affected device. As of the disclosure, Cisco reported no known public exploits targeting this vulnerability in the wild (SecurityWeek).

Cisco has released software updates to address this vulnerability. The company indicated that there are no workarounds available, making it essential for affected users to apply the appropriate security patches (SecurityWeek).