CVE-2012-4094: Buffer Overflow

Published Sep 24, 2013

Updated

Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service by reading and forging control messages associated with Smart Call Home reports, aka Bug ID CSCtl00198.

Affected Software

1 affected component

Cisco Unified Computing System

Event History

Sep 24, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4094?

CVE-2012-4094 is classified as a medium severity vulnerability.

What causes CVE-2012-4094?

CVE-2012-4094 is caused by a buffer overflow in the Smart Call Home feature of Cisco Unified Computing System.

How does CVE-2012-4094 affect systems?

CVE-2012-4094 allows remote attackers to create a denial of service condition by manipulating control messages.

How do I fix CVE-2012-4094?

To fix CVE-2012-4094, apply the recommended patches provided by Cisco for the affected UCS versions.

Is CVE-2012-4094 actively exploited?

There have been no public reports indicating that CVE-2012-4094 is actively being exploited in the wild.