CVE-2012-4623: Input Validation
Published Sep 27, 2012
·Updated
The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG before 3.2.5SG, 3.2.xS, 3.2.xXO, 3.3.xS, and 3.3.xSG before 3.3.1SG allows remote attackers to cause a denial of service (device reload) via a malformed DHCPv6 packet, aka Bug ID CSCto57723.
Affected Software
338 affected components
Cisco IOS XE=2.1
Cisco IOS XE=2.1.0
Cisco IOS XE=2.1.1
Cisco IOS XE=2.1.2
Cisco IOS XE=2.2
Cisco IOS XE=2.2.1
Cisco IOS XE=2.2.2
Cisco IOS XE=2.2.3
Cisco IOS XE=2.3
Cisco IOS XE=2.3.0
Cisco IOS XE=2.3.1
Cisco IOS XE=2.3.1t
Cisco IOS XE=2.3.2
Cisco IOS XE=2.4
Cisco IOS XE=2.4.0
Cisco IOS XE=2.4.1
Cisco IOS XE=2.4.2
Cisco IOS XE=2.4.3
Cisco IOS XE=2.4.4
Cisco IOS XE=2.5.0
Cisco IOS XE=2.5.1
Cisco IOS XE=2.5.2
Cisco IOS XE=2.6.0
Cisco IOS XE=2.6.1
Cisco IOS XE=2.6.2
cisco IOS=12.3
cisco IOS=12.3\(1a\)
cisco IOS=12.3\(2\)ja
cisco IOS=12.3\(2\)ja5
cisco IOS=12.3\(2\)jk
cisco IOS=12.3\(2\)jk1
cisco IOS=12.3\(2\)t3
cisco IOS=12.3\(2\)t8
cisco IOS=12.3\(2\)xa4
cisco IOS=12.3\(2\)xa5
cisco IOS=12.3\(2\)xc1
cisco IOS=12.3\(2\)xc2
cisco IOS=12.3\(2\)xc3
cisco IOS=12.3\(2\)xc4
cisco IOS=12.3\(2\)xe3
cisco IOS=12.3\(2\)xe4
cisco IOS=12.3\(3e\)
cisco IOS=12.3\(3h\)
cisco IOS=12.3\(3i\)
cisco IOS=12.3\(4\)eo1
cisco IOS=12.3\(4\)ja
cisco IOS=12.3\(4\)ja1
cisco IOS=12.3\(4\)t
cisco IOS=12.3\(4\)t1
cisco IOS=12.3\(4\)t2
cisco IOS=12.3\(4\)t3
cisco IOS=12.3\(4\)t4
cisco IOS=12.3\(4\)t8
cisco IOS=12.3\(4\)tpc11a
cisco IOS=12.3\(4\)xd
cisco IOS=12.3\(4\)xd1
cisco IOS=12.3\(4\)xd2
cisco IOS=12.3\(4\)xe4
cisco IOS=12.3\(4\)xg1
cisco IOS=12.3\(4\)xg2
cisco IOS=12.3\(4\)xg4
cisco IOS=12.3\(4\)xg5
cisco IOS=12.3\(4\)xh
cisco IOS=12.3\(4\)xk
cisco IOS=12.3\(4\)xk1
cisco IOS=12.3\(4\)xk3
cisco IOS=12.3\(4\)xk4
cisco IOS=12.3\(4\)xq
cisco IOS=12.3\(4\)xq1
cisco IOS=12.3\(5\)
cisco IOS=12.3\(5\)b1
cisco IOS=12.3\(5a\)
cisco IOS=12.3\(5a\)b
cisco IOS=12.3\(5a\)b2
cisco IOS=12.3\(5a\)b5
cisco IOS=12.3\(5b\)
cisco IOS=12.3\(5c\)
cisco IOS=12.3\(5e\)
cisco IOS=12.3\(5f\)
cisco IOS=12.3\(6\)
cisco IOS=12.3\(6a\)
cisco IOS=12.3\(6d\)
cisco IOS=12.3\(6e\)
cisco IOS=12.3\(6f\)
cisco IOS=12.3\(7\)ja
cisco IOS=12.3\(7\)ja1
cisco IOS=12.3\(7\)jx
cisco IOS=12.3\(7\)t
cisco IOS=12.3\(7\)t4
cisco IOS=12.3\(7\)t8
cisco IOS=12.3\(7\)t9
cisco IOS=12.3\(7\)t10
cisco IOS=12.3\(7\)t12
cisco IOS=12.3\(7\)xi3
cisco IOS=12.3\(7\)xi4
cisco IOS=12.3\(7\)xi7
cisco IOS=12.3\(7\)xr3
cisco IOS=12.3\(7\)xr4
cisco IOS=12.3\(7\)xr6
cisco IOS=12.3\(7.7\)
cisco IOS=12.3\(8\)ja
cisco IOS=12.3\(8\)ja1
cisco IOS=12.3\(8\)t4
cisco IOS=12.3\(8\)t7
cisco IOS=12.3\(8\)t8
cisco IOS=12.3\(8\)t9
cisco IOS=12.3\(8\)t11
cisco IOS=12.3\(8\)xu2
cisco IOS=12.3\(8\)xy4
cisco IOS=12.3\(8\)xy5
cisco IOS=12.3\(8\)xy6
cisco IOS=12.3\(8\)ya1
cisco IOS=12.3\(8\)yd
cisco IOS=12.3\(8\)yf
cisco IOS=12.3\(8\)yg
cisco IOS=12.3\(8\)yg1
cisco IOS=12.3\(8\)yg2
cisco IOS=12.3\(8\)yg3
cisco IOS=12.3\(8\)yh
cisco IOS=12.3\(8\)yi
cisco IOS=12.3\(8\)yi1
cisco IOS=12.3\(8\)yi3
cisco IOS=12.3\(9\)
cisco IOS=12.3\(9a\)bc
cisco IOS=12.3\(9a\)bc2
cisco IOS=12.3\(9a\)bc6
cisco IOS=12.3\(9a\)bc7
cisco IOS=12.3\(9d\)
cisco IOS=12.3\(9e\)
cisco IOS=12.3\(10\)
cisco IOS=12.3\(10c\)
cisco IOS=12.3\(10d\)
cisco IOS=12.3\(10e\)
cisco IOS=12.3\(11\)
cisco IOS=12.3\(11\)t
cisco IOS=12.3\(11\)t4
cisco IOS=12.3\(11\)t5
cisco IOS=12.3\(11\)t6
cisco IOS=12.3\(11\)t8
cisco IOS=12.3\(11\)t9
cisco IOS=12.3\(11\)xl
cisco IOS=12.3\(11\)xl3
cisco IOS=12.3\(11\)yf
cisco IOS=12.3\(11\)yf2
cisco IOS=12.3\(11\)yf3
cisco IOS=12.3\(11\)yf4
cisco IOS=12.3\(11\)yj
cisco IOS=12.3\(11\)yk
cisco IOS=12.3\(11\)yk1
cisco IOS=12.3\(11\)yk2
cisco IOS=12.3\(11\)yl
cisco IOS=12.3\(11\)yn
cisco IOS=12.3\(11\)yr
cisco IOS=12.3\(11\)ys
cisco IOS=12.3\(11\)ys1
cisco IOS=12.3\(11\)yw
cisco IOS=12.3\(12\)
cisco IOS=12.3\(12b\)
cisco IOS=12.3\(12e\)
cisco IOS=12.3\(13\)
cisco IOS=12.3\(13a\)
cisco IOS=12.3\(13a\)bc
cisco IOS=12.3\(13a\)bc1
cisco IOS=12.3\(13b\)
cisco IOS=12.3\(14\)t
cisco IOS=12.3\(14\)t2
cisco IOS=12.3\(14\)t4
cisco IOS=12.3\(14\)t5
cisco IOS=12.3\(14\)ym4
cisco IOS=12.3\(14\)yq
cisco IOS=12.3\(14\)yq1
cisco IOS=12.3\(14\)yq3
cisco IOS=12.3\(14\)yq4
cisco IOS=12.3\(14\)yt
cisco IOS=12.3\(14\)yt1
cisco IOS=12.3\(14\)yu
cisco IOS=12.3\(14\)yu1
cisco IOS=12.3\(15\)
cisco IOS=12.3\(15b\)
cisco IOS=12.3\(16\)
cisco IOS=12.3b
cisco IOS=12.3bc
cisco IOS=12.3bw
cisco IOS=12.3j
cisco IOS=12.3ja
cisco IOS=12.3jea
cisco IOS=12.3jeb
cisco IOS=12.3jec
cisco IOS=12.3jed
cisco IOS=12.3jk
cisco IOS=12.3jl
cisco IOS=12.3jx
cisco IOS=12.3t
cisco IOS=12.3tpc
cisco IOS=12.3va
cisco IOS=12.3xa
cisco IOS=12.3xb
cisco IOS=12.3xc
cisco IOS=12.3xd
cisco IOS=12.3xe
cisco IOS=12.3xf
cisco IOS=12.3xg
cisco IOS=12.3xh
cisco IOS=12.3xi
cisco IOS=12.3xj
cisco IOS=12.3xk
cisco IOS=12.3xl
cisco IOS=12.3xm
cisco IOS=12.3xn
cisco IOS=12.3xq
cisco IOS=12.3xr
cisco IOS=12.3xs
cisco IOS=12.3xt
cisco IOS=12.3xu
cisco IOS=12.3xv
cisco IOS=12.3xw
cisco IOS=12.3xx
cisco IOS=12.3xy
cisco IOS=12.3xz
cisco IOS=12.3ya
cisco IOS=12.3yb
cisco IOS=12.3yc
cisco IOS=12.3yd
cisco IOS=12.3ye
cisco IOS=12.3yf
cisco IOS=12.3yg
cisco IOS=12.3yh
cisco IOS=12.3yi
cisco IOS=12.3yj
cisco IOS=12.3yk
cisco IOS=12.3yl
cisco IOS=12.3ym
cisco IOS=12.3yn
cisco IOS=12.3yq
cisco IOS=12.3yr
cisco IOS=12.3ys
cisco IOS=12.3yt
cisco IOS=12.3yu
cisco IOS=12.3yw
cisco IOS=12.3yx
cisco IOS=12.3yz
cisco IOS=12.3za
cisco IOS=12.4
cisco IOS=12.4\(1\)
cisco IOS=12.4\(1b\)
cisco IOS=12.4\(1c\)
cisco IOS=12.4\(2\)mr
cisco IOS=12.4\(2\)mr1
cisco IOS=12.4\(2\)t
cisco IOS=12.4\(2\)t1
cisco IOS=12.4\(2\)t2
cisco IOS=12.4\(2\)t3
cisco IOS=12.4\(2\)t4
cisco IOS=12.4\(2\)xa
cisco IOS=12.4\(2\)xb
cisco IOS=12.4\(2\)xb2
cisco IOS=12.4\(3\)
cisco IOS=12.4\(3\)t2
cisco IOS=12.4\(3a\)
cisco IOS=12.4\(3b\)
cisco IOS=12.4\(3d\)
cisco IOS=12.4\(4\)mr
cisco IOS=12.4\(4\)t
cisco IOS=12.4\(4\)t2
cisco IOS=12.4\(5\)
cisco IOS=12.4\(5b\)
cisco IOS=12.4\(6\)t
cisco IOS=12.4\(6\)t1
cisco IOS=12.4\(7\)
cisco IOS=12.4\(7a\)
cisco IOS=12.4\(8\)
cisco IOS=12.4\(9\)t
cisco IOS=12.4\(11\)md
cisco IOS=12.4\(15\)md
cisco IOS=12.4\(22\)md
cisco IOS=12.4\(22\)mda
cisco IOS=12.4\(23\)
cisco IOS=12.4\(24\)md
cisco IOS=12.4\(24\)md1
cisco IOS=12.4\(24\)md2
cisco IOS=12.4\(24\)md3
cisco IOS=12.4\(24\)md4
cisco IOS=12.4\(24\)mda
cisco IOS=12.4\(24\)t1
cisco IOS=12.4gc
cisco IOS=12.4ja
cisco IOS=12.4jda
cisco IOS=12.4jdc
cisco IOS=12.4jdd
cisco IOS=12.4jk
cisco IOS=12.4jl
cisco IOS=12.4jma
cisco IOS=12.4jmb
cisco IOS=12.4jx
cisco IOS=12.4md
cisco IOS=12.4mda
cisco IOS=12.4mdb
cisco IOS=12.4mr
cisco IOS=12.4mra
cisco IOS=12.4xm
cisco IOS=12.4xn
cisco IOS=12.4xp
cisco IOS=12.4xq
cisco IOS=12.4xr
cisco IOS=12.4xt
cisco IOS=12.4xv
cisco IOS=12.4xw
cisco IOS=12.4xy
cisco IOS=12.4xz
cisco IOS=12.4ya
cisco IOS=12.4yb
cisco IOS=12.4yd
cisco IOS=12.4ye
cisco IOS=12.4yg
cisco IOS=15.0
cisco IOS=15.0\(1\)se
cisco IOS=15.1
cisco IOS=15.2
Cisco IOS XE=3.1.0s
Cisco IOS XE=3.1.0sg
Cisco IOS XE=3.1.1s
Cisco IOS XE=3.1.1sg
Cisco IOS XE=3.1.2s
Cisco IOS XE=3.1.3s
Cisco IOS XE=3.2.0s
Cisco IOS XE=3.2.0sg
Cisco IOS XE=3.2.0xo
Cisco IOS XE=3.2.1s
Cisco IOS XE=3.2.1sg
Cisco IOS XE=3.2.2s
Cisco IOS XE=3.2.2sg
Cisco IOS XE=3.2.3sg
Cisco IOS XE=3.2.4sg
Cisco IOS XE=3.3.0s
Cisco IOS XE=3.3.0sg
Cisco IOS XE=3.3.1s
Cisco IOS XE=3.3.2s
Cisco IOS XE=3.3.3s
Event History
Sep 27, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4623?
CVE-2012-4623 has a medium severity rating and can lead to a denial of service condition.
2
How do I fix CVE-2012-4623?
To mitigate CVE-2012-4623, it is recommended to upgrade to a patched version of Cisco IOS or IOS XE that addresses the vulnerability.
3
What versions are affected by CVE-2012-4623?
CVE-2012-4623 impacts Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.2, along with certain IOS XE versions.
4
Can CVE-2012-4623 be exploited remotely?
Yes, CVE-2012-4623 can be exploited remotely by sending malicious DHCPv6 packets.
5
What are the potential consequences of CVE-2012-4623?
Exploitation of CVE-2012-4623 can cause affected devices to reload, resulting in service disruption.