CVE-2012-0378: High severity cisco adaptive security appliance software vulnerability
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by triggering a large number of stale connections that result in an incorrect value for an MPF connection count, aka Bug ID CSCtv19854.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0378?
CVE-2012-0378 has a high severity rating due to its potential to cause a denial of service on affected Cisco ASA devices.
How do I fix CVE-2012-0378?
To resolve CVE-2012-0378, update your Cisco Adaptive Security Appliance software to a version that is not affected, preferably version 8.5 or later.
Which Cisco ASA versions are affected by CVE-2012-0378?
CVE-2012-0378 affects Cisco ASA software versions 8.0 through 8.4.
What type of attack does CVE-2012-0378 enable?
CVE-2012-0378 allows remote attackers to exploit the vulnerability to create a denial of service by exceeding connection limits with stale connections.
Is there a workaround for CVE-2012-0378 while waiting for a patch?
While a patch is the best solution, temporarily limiting connection counts or monitoring for unusual traffic patterns may mitigate the impact of CVE-2012-0378.