ID CVE-2012-0383
Summary Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or reload) via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326.
References
Vulnerable Configurations
  • cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:ios:15.0:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:15.0:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:ios:15.1:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:ios:15.1:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 29-08-2017 - 01:30)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 52758
cisco 20120328 Cisco IOS Software Network Address Translation Vulnerability
osvdb 80701
sectrack 1026864
secunia 48515
xf ciscoios-nat-feature-dos(74432)
Last major update 29-08-2017 - 01:30
Published 29-03-2012 - 11:01
Last modified 29-08-2017 - 01:30
Back to Top