CVE-2012-0383
published 2012-03-29CVE-2012-0383: Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or…
PriorityP434high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.01%
78.8th percentile
Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or reload) via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS Software Network Address Translation Vulnerability
vendor_cisco·2012-03-28·CVSS 7.8
CVE-2012-0383 [HIGH] Cisco IOS Software Network Address Translation Vulnerability
Cisco IOS Software Network Address Translation Vulnerability
The Cisco IOS Software Network Address Translation (NAT) feature
contains a denial of service (DoS) vulnerability in the translation of Session Initiation Protocol (SIP) packets.
The vulnerability is caused
when packets in transit on the vulnerable device require translation on the SIP payload.
Cisco has released software updates that address this vulnerability. A workaround that mitigates the vulnerability is available.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-nat
Note: The March 28, 2012, Cisco IOS Software Security Advisory bundled publication includes nine Cisco Security Advisories. Each advisory lists the Cisco IOS Sof
Cisco
Cisco IOS Software Network Address Translation Vulnerability
vendor_cisco
CVE-2012-0383 Cisco IOS Software Network Address Translation Vulnerability
CVE-2012-0383: Cisco IOS Software Network Address Translation Vulnerability
The Cisco IOS Software Network Address Translation (NAT) feature contains a denial of service (DoS) vulnerability in the translation of Session Initiation Protocol (SIP) packets. The vulnerability is caused when packets in transit on the vulnerable device require translation on the SIP payload. Cisco has released software updates that address this vulnerability. A workaround that mitigates the vulnerability is available. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-nat Note: The March 28, 2012, Cisco IOS Software Security Advisory bundled publication includes nine Cisco Security Advisories. Each advisory lists the C
GHSA
GHSA-fhr5-wq74-m4f9: Memory leak in the NAT feature in Cisco IOS 12
ghsa_unreviewed·2022-05-04
CVE-2012-0383 [HIGH] GHSA-fhr5-wq74-m4f9: Memory leak in the NAT feature in Cisco IOS 12
Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or reload) via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/80701http://secunia.com/advisories/48515http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-nathttp://www.securityfocus.com/bid/52758http://www.securitytracker.com/id?1026864https://exchange.xforce.ibmcloud.com/vulnerabilities/74432http://osvdb.org/80701http://secunia.com/advisories/48515http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-nathttp://www.securityfocus.com/bid/52758http://www.securitytracker.com/id?1026864https://exchange.xforce.ibmcloud.com/vulnerabilities/74432
2012-03-29
Published