Lucene search

[email protected]CVE-2012-3899

HistorySep 16, 2012 - 10:34 a.m.

CVE-2012-3899

2012-09-1610:34:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2012-3899

cisco ips

denial of service

memory corruption

process crash

traffic-inspection outage

bug id csctn23051

nvd

7.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.2%

JSON

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051.

CPENameOperatorVersion
cisco:intrusion_prevention_systemcisco intrusion prevention systemeq6.0
cisco:intrusion_prevention_systemcisco intrusion prevention systemeq6.2
cisco:intrusion_prevention_systemcisco intrusion prevention systemeq7.0
cisco:ips_4240cisco ips 4240eq*
cisco:ips_4250_sxcisco ips 4250 sxeq*
cisco:ips_4255cisco ips 4255eq*
cisco:ips_4260cisco ips 4260eq*
cisco:ips_4270-20cisco ips 4270-20eq*

CPE	Name	Operator	Version
cisco:intrusion_prevention_system	cisco intrusion prevention system	eq	6.0
cisco:intrusion_prevention_system	cisco intrusion prevention system	eq	6.2
cisco:intrusion_prevention_system	cisco intrusion prevention system	eq	7.0
cisco:ips_4240	cisco ips 4240	eq	*
cisco:ips_4250_sx	cisco ips 4250 sx	eq	*
cisco:ips_4255	cisco ips 4255	eq	*
cisco:ips_4260	cisco ips 4260	eq	*
cisco:ips_4270-20	cisco ips 4270-20	eq	*

References

www.cisco.com/web/software/282549758/51927/IPS-6_2-4-E4-readme.txt

7.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.2%

JSON

Related for CVE-2012-3899

cvelist1 prion1