CVE-2012-2472

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html	Vendor Advisory
http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(5\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim::::::
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::*

cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:39

Type	Values Removed	Values Added
References	~~() http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html - Vendor Advisory~~	() http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html - Vendor Advisory

15 Aug 2023, 14:28

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(2\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(1\):::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::*

11 Aug 2023, 19:03

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.2:interim:::::: cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(2\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(5\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(3\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.2:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.3:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2:::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim:::::: cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(5\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(2\):::::::*

Information

Published : 2012-08-06 17:55

Updated : 2024-11-21 01:39

NVD link : CVE-2012-2472

Mitre link : CVE-2012-2472

CVE.ORG link : CVE-2012-2472

JSON object : View

Products Affected

cisco

adaptive_security_appliance_software
5500_series_adaptive_security_appliance

CWE

CWE-399

Resource Management Errors

7.8 /10