CVE-2012-1315
published 2012-03-29CVE-2012-1315: Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of…
PriorityP434high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.01%
78.8th percentile
Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS Software Zone-Based Firewall Vulnerabilities
vendor_cisco·2012-03-28·CVSS 7.8
CVE-2012-0387 [HIGH] Cisco IOS Software Zone-Based Firewall Vulnerabilities
Cisco IOS Software Zone-Based Firewall Vulnerabilities
Cisco IOS Software contains four vulnerabilities related to Cisco IOS Zone-Based Firewall features. These vulnerabilities are as follows:
Memory Leak Associated with Crafted IP Packets
Memory Leak in HTTP Inspection
Memory Leak in H.323 Inspection
Memory Leak in SIP Inspection
Workarounds that mitigate these vulnerabilities are not available.
Cisco has released software updates that address these vulnerabilities.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw
Note: The March 28, 2012, Cisco IOS Software Security Advisory bundled publication includes nine Cisco Security Advisories. Each advisory lists the Cisco IOS Software
Cisco
Cisco IOS Software Zone-Based Firewall Vulnerabilities
vendor_cisco
CVE-2012-1315 Cisco IOS Software Zone-Based Firewall Vulnerabilities
CVE-2012-1315: Cisco IOS Software Zone-Based Firewall Vulnerabilities
Cisco IOS Software contains four vulnerabilities related to Cisco IOS Zone-Based Firewall features. These vulnerabilities are as follows: Memory Leak Associated with Crafted IP Packets Memory Leak in HTTP Inspection Memory Leak in H.323 Inspection Memory Leak in SIP Inspection
Bug IDs: CSCti46171, CSCto89536, CSCtq36153, CSCti46171, CSCto89536
GHSA
GHSA-6pmp-x933-f34g: Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12
ghsa_unreviewed·2022-05-17
CVE-2012-1315 [HIGH] GHSA-6pmp-x933-f34g: Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12
Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/80699http://secunia.com/advisories/48608http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfwhttp://www.securityfocus.com/bid/52753http://www.securitytracker.com/id?1026861https://exchange.xforce.ibmcloud.com/vulnerabilities/74437http://osvdb.org/80699http://secunia.com/advisories/48608http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfwhttp://www.securityfocus.com/bid/52753http://www.securitytracker.com/id?1026861https://exchange.xforce.ibmcloud.com/vulnerabilities/74437
2012-03-29
Published