CVE-2012-5415: Race Condition

Published Apr 16, 2013

Updated

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272.

Affected Software

4 affected components

Cisco 5500 Adaptive Security Appliance=7.2-2

Cisco 5500 Series Adaptive Security Appliance

Cisco 5500 Series Adaptive Security Appliance=7.2

Cisco Adaptive Security Appliance

Event History

Apr 16, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-5415?

CVE-2012-5415 has a moderate severity level due to its potential for causing denial of service attacks.

How do I fix CVE-2012-5415?

To fix CVE-2012-5415, update your Cisco Adaptive Security Appliance to the patched version provided by Cisco.

What devices are affected by CVE-2012-5415?

CVE-2012-5415 affects several models of the Cisco Adaptive Security Appliance, specifically versions 7.2-2 and 7.2.

What type of attack does CVE-2012-5415 enable?

CVE-2012-5415 enables remote attackers to launch denial of service attacks by leveraging a race condition.

What are the implications of CVE-2012-5415 for network security?

CVE-2012-5415 could lead to high CPU consumption or device reloads, significantly impacting network availability.