CVE-2010-2836

2010-09-2319:00:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2010-2836

memory leak

ssl vpn

cisco ios

http port redirection

denial of service

bug id csctg21685

nvd

6.8 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.1%

JSON

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.

CPENameOperatorVersion
cisco:ioscisco ioseq12.4mra
cisco:ioscisco ioseq12.4xj
cisco:ioscisco ioseq12.4xl
cisco:ioscisco ioseq12.4xm
cisco:ioscisco ioseq12.4mr
cisco:ioscisco ioseq12.4xt
cisco:ioscisco ioseq12.4gc
cisco:ioscisco ioseq15.1t
cisco:ioscisco ioseq12.4xf
cisco:ioscisco ioseq12.4xg

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.4mra
cisco:ios	cisco ios	eq	12.4xj
cisco:ios	cisco ios	eq	12.4xl
cisco:ios	cisco ios	eq	12.4xm
cisco:ios	cisco ios	eq	12.4mr
cisco:ios	cisco ios	eq	12.4xt
cisco:ios	cisco ios	eq	12.4gc
cisco:ios	cisco ios	eq	15.1t
cisco:ios	cisco ios	eq	12.4xf
cisco:ios	cisco ios	eq	12.4xg