First published: Thu May 03 2012(Updated: )
Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service (device crash) by sending IPv6 packets, aka Bug ID CSCtk53534.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | =15.1 | |
Cisco IOS | =15.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-1324 has a severity rating that indicates it can cause a denial of service, which may lead to a device crash.
To fix CVE-2012-1324, you should upgrade your Cisco IOS to a patched version beyond 15.2.
CVE-2012-1324 can be exploited through a race condition triggered by sending specially crafted IPv6 packets.
CVE-2012-1324 affects Cisco IOS versions 15.1 and 15.2.
The impact of CVE-2012-1324 is a potential denial of service that results in a crash of the affected Cisco devices.