Description
The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2012-4568 | The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068. |
References
History
No history.
Subscriptions
Cisco
Subscribe
5500 Series Adaptive Security Appliance
Subscribe
Adaptive Security Appliance Software
Subscribe
Catalyst 6500
Subscribe
Catalyst 6503-e
Subscribe
Catalyst 6504-e
Subscribe
Catalyst 6506-e
Subscribe
Catalyst 6509-e
Subscribe
Catalyst 6509-neb-a
Subscribe
Catalyst 6509-v-e
Subscribe
Catalyst 6513
Subscribe
Catalyst 6513-e
Subscribe
Status: PUBLISHED
Assigner: cisco
Published:
Updated: 2024-08-06T20:42:55.166Z
Reserved: 2012-08-24T00:00:00.000Z
Link: CVE-2012-4643
No data.
Status : Modified
Published: 2012-10-29T20:55:01.103
Modified: 2026-04-29T01:13:23.040
Link: CVE-2012-4643
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD