CVE-2012-0387: High severity cisco ios vulnerability

Published Mar 29, 2012

Updated

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153.

Affected Software

4 affected components

Cisco IOS=12.4

Cisco IOS=15.0

Cisco IOS=15.1

Cisco IOS=15.2

Event History

Mar 29, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0387?

CVE-2012-0387 has a high severity rating as it allows remote attackers to cause a denial of service.

How do I fix CVE-2012-0387?

To fix CVE-2012-0387, apply the latest software updates provided by Cisco for affected IOS versions.

What products are affected by CVE-2012-0387?

CVE-2012-0387 affects Cisco IOS versions 12.4, 15.0, 15.1, and 15.2 with the HTTP Inspection Engine feature.

What type of attack does CVE-2012-0387 enable?

CVE-2012-0387 enables remote attackers to exploit crafted transit HTTP traffic to cause memory leaks.

Can CVE-2012-0387 lead to device stability issues?

Yes, CVE-2012-0387 can lead to device instability by causing memory consumption or complete device reloads.