CVE-2012-1315: High severity cisco ios vulnerability

Published Mar 29, 2012

Updated

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.

Affected Software

4 affected components

Cisco IOS=12.4

Cisco IOS=15.0

Cisco IOS=15.1

Cisco IOS=15.2

Event History

Mar 29, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-1315?

CVE-2012-1315 is classified as a denial of service vulnerability that can lead to memory leak and potential device reload.

How do I fix CVE-2012-1315?

To fix CVE-2012-1315, you should update your Cisco IOS software to a version that addresses this vulnerability.

What systems are affected by CVE-2012-1315?

CVE-2012-1315 affects Cisco IOS versions 12.4, 15.0, 15.1, and 15.2 when using the SIP inspection feature.

What type of attack does CVE-2012-1315 enable?

CVE-2012-1315 enables remote attackers to perform a denial of service attack via crafted SIP traffic.

Is there a patch available for CVE-2012-1315?

Yes, Cisco has released patches in newer versions of the IOS software to address CVE-2012-1315.