Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-1367
cisco ios
malloclite
cve-2012-1367
denial of service
remote attackers
bgp
bug id csctq06538
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.6%
The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route Processor crash) via a BGP UPDATE message with a modified local-preference (aka LOCAL_PREF) attribute length, aka Bug ID CSCtq06538.
Affected configurations
Node
ciscoiosMatch12.0
ORciscoiosMatch12.2
ORciscoiosMatch15.0
ORciscoiosMatch15.1
ORciscoiosMatch15.2
Related
nvd
nvd
CVE-2012-1367
2012-08-06 15:55:01
prion
prion
Code injection
2012-08-06 15:55:00
nessus
nessus
Cisco IOS MallocLite BGP Update DoS
2012-08-17 00:00:00
cvelist
cvelist
CVE-2012-1367
2022-10-03 16:15:25
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.6%
Related for CVE-2012-1367