Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios | Cisco | 12.4t (including) | 12.4t (including) |
| Ios | Cisco | 12.4xz (including) | 12.4xz (including) |
| Ios | Cisco | 12.4ya (including) | 12.4ya (including) |