Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service (traffic loop and device crash) via a packet that triggers multiple matches, aka Bug ID CSCui45606.
https://exchange.xforce.ibmcloud.com/vulnerabilities/94445
http://www.securityfocus.com/bid/68504
http://tools.cisco.com/security/center/viewAlert.x?alertId=34911