CVE-2012-2474: Infoleak
Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank response page) by using the clientless WebVPN feature, aka Bug ID CSCth34278.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2474?
CVE-2012-2474 has a moderate severity level, primarily causing denial of service due to memory leaks.
How do I fix CVE-2012-2474?
Fix CVE-2012-2474 by upgrading to a Cisco Adaptive Security Appliance software version that addresses this vulnerability.
Who is affected by CVE-2012-2474?
CVE-2012-2474 affects users of Cisco Adaptive Security Appliance 5500 series devices running software versions 8.2 to 8.4.
What type of attack does CVE-2012-2474 enable?
CVE-2012-2474 allows remote authenticated users to execute a denial of service attack through the clientless WebVPN feature.
Is there a workaround for CVE-2012-2474?
There are no known workarounds for CVE-2012-2474; the recommended action is to apply the appropriate software update.