Design/Logic Flaw

Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via malformed transit H.323 traffic, aka Bug ID CSCtq45553...

Memory corruption

Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted IP packets, aka Bug ID CSCto89536...

Design/Logic Flaw

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

Information disclosure

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

CVE-2012-0387

CVE-2012-0387 concerns a memory leak in the Cisco IOS Zone-Based Firewall HTTP Inspection Engine. The flaw affects Cisco IOS versions 12.4 and 15.0/15.1/15.2, where crafted transit HTTP traffic can trigger a memory leak, leading to denial of service via memory consumption or device reload. The is...

CVE-2012-0387

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

CVE-2012-0388

CVE-2012-0388 relates to a memory leak in the H.323 inspection feature of Cisco IOS’s Zone-Based Firewall . Affected: Cisco IOS versions 12.4, 15.0, 15.1, 15.2. Cause: memory leak triggered by malformed transit H.323 traffic, enabling remote attackers to cause a denial of service through memory c...

CVE-2012-0388

Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via malformed transit H.323 traffic, aka Bug ID CSCtq45553...

CVE-2012-1315

CVE-2012-1315 covers a memory leak in the Cisco IOS Zone-Based Firewall SIP inspection feature. Reported impact: a remote attacker can cause denial of service via crafted transit SIP traffic, potentially leading to memory exhaustion or device reload. Affected software ranges include Cisco IOS 12....

CVE-2012-1310

Cisco IOS Zone-Based Firewall vulnerabilities (CVE-2012-1310) affect the Zone-Based Firewall in IOS 12.4 and 15.x releases (notably 15.0/15.1/15.2). The issues are memory leaks triggered by crafted IP packets and, per the related advisories, also affect memory behavior in HTTP, H.323, and SIP ins...

CVE-2012-1310

Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted IP packets, aka Bug ID CSCto89536...

CVE-2012-1315

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

CVE-2012-0387: Undefined Security Weakness

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

CVE-2012-1310: Undefined Security Weakness

Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted IP packets, aka Bug ID CSCto89536...

CVE-2012-1315: Undefined Security Weakness

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

CVE-2012-0388: Undefined Security Weakness

Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via malformed transit H.323 traffic, aka Bug ID CSCtq45553...

Cisco IOS Software Zone-Based Firewall Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2012-2535

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.2 Description A memory leak in the H.323 inspection feature of the Zone-Based Firewall in Cisco IOS allows remote attackers to cause a denial of service via malformed transit H.323 traffic. This issue is part...

PT-2012-2534

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4, 15.0, 15.1, and 15.2 Description The issue is related to a memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall, allowing remote attackers to cause a denial of service via crafted transit HTTP...

PT-2012-3188

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.2 Description The issue is related to a memory leak in the SIP inspection feature in the Zone-Based Firewall, allowing remote attackers to cause a denial of service via crafted transit SIP traffic. This is on...