CVE-2012-0387 — Missing Release of Memory after Effective Lifetime in Cisco IOS

CWE-3995 documents5 sources

Severity

7.8HIGHNVD

EPSS

2.1%

top 15.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco IOS

Timeline

PublishedMar 29

Latest updateMay 4

Description

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

▶NVDcisco/ios4 versions+3

🔴Vulnerability Details

GHSA

GHSA-7p35-v6xq-2524: Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12↗2022-05-04

▶

CVEList

CVE-2012-0387: Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12↗2012-03-29

▶

📋Vendor Advisories

Cisco

Cisco IOS Software Zone-Based Firewall Vulnerabilities↗2012-03-28

▶

💬Community

Bugzilla

CVE-2012-0459 Mozilla: Crash when accessing keyframe cssText after dynamic modification (MFSA 2012-17)↗2012-03-14

▶