CVE Vulnerabilities

CVE-2012-2472

Published: Aug 06, 2012 | Modified: Aug 15, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.

Affected Software

Name Vendor Start Version End Version
Adaptive_security_appliance_software Cisco 8.2 (including) 8.2 (including)
Adaptive_security_appliance_software Cisco 8.2(1) (including) 8.2(1) (including)
Adaptive_security_appliance_software Cisco 8.2(2) (including) 8.2(2) (including)
Adaptive_security_appliance_software Cisco 8.2(3) (including) 8.2(3) (including)
Adaptive_security_appliance_software Cisco 8.2(3.9) (including) 8.2(3.9) (including)
Adaptive_security_appliance_software Cisco 8.2(4) (including) 8.2(4) (including)
Adaptive_security_appliance_software Cisco 8.2(4.1) (including) 8.2(4.1) (including)
Adaptive_security_appliance_software Cisco 8.2(4.4) (including) 8.2(4.4) (including)
Adaptive_security_appliance_software Cisco 8.2(5) (including) 8.2(5) (including)
Adaptive_security_appliance_software Cisco 8.2.1 (including) 8.2.1 (including)
Adaptive_security_appliance_software Cisco 8.2.2 (including) 8.2.2 (including)
Adaptive_security_appliance_software Cisco 8.2.2-interim (including) 8.2.2-interim (including)
Adaptive_security_appliance_software Cisco 8.2.3 (including) 8.2.3 (including)
Adaptive_security_appliance_software Cisco 8.4 (including) 8.4 (including)
Adaptive_security_appliance_software Cisco 8.4(1) (including) 8.4(1) (including)
Adaptive_security_appliance_software Cisco 8.4(1.11) (including) 8.4(1.11) (including)
Adaptive_security_appliance_software Cisco 8.4(2) (including) 8.4(2) (including)
Adaptive_security_appliance_software Cisco 8.4(2.11) (including) 8.4(2.11) (including)

References