Lucene search

K
cve[email protected]CVE-2012-0387
HistoryMar 29, 2012 - 11:01 a.m.

CVE-2012-0387

2012-03-2911:01:16
CWE-399
web.nvd.nist.gov
25
cisco
ios
zone-based firewall
memory leak
cve-2012-0387
nvd
bug id csctq36153

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.9 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153.

Affected configurations

NVD
Node
ciscoiosMatch12.4
OR
ciscoiosMatch15.0
OR
ciscoiosMatch15.1
OR
ciscoiosMatch15.2

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.9 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

Related for CVE-2012-0387