CVE-2012-4622
published 2012-09-27CVE-2012-4622: Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a…
PriorityP427high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
1.55%
72.5th percentile
Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service (card reload) via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | catalyst_4500e_series_switch_with_cisco_catalyst_supervisor_engine_7l-e | — | — |
| cisco | ios_xe | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
vendor_redhat4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gw39-q5qm-cq3g: Cisco IOS XE 03
ghsa_unreviewed·2022-05-17
CVE-2012-4622 [HIGH] GHSA-gw39-q5qm-cq3g: Cisco IOS XE 03
Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service (card reload) via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456.
Cisco
Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability
vendor_cisco·2012-09-26·CVSS 7.8
CVE-2012-4622 [HIGH] CWE-119 Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability
Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability
The Catalyst 4500E series switch with Supervisor Engine 7L-E contains a denial of service (DoS) vulnerability when processing specially crafted packets that can cause a reload of the device.
Cisco has released software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are not available.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ecc
Note: The September 26, 2012, Cisco IOS Software Security Advisory bundled publication includes nine Cisco Security Advisories. Eight of the advisories address vulnerabilities in Cisco IOS Software, and one advis
Red Hat
kernel: kvm: pit timer with no irqchip crashes the system
vendor_redhat·2011-12-14·CVSS 4.9
CVE-2011-4622 [MEDIUM] kernel: kvm: pit timer with no irqchip crashes the system
kernel: kvm: pit timer with no irqchip crashes the system
The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer.
Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4 and Red Hat Enterprise MRG as they did not provide support for the KVM subsystem. It has been addressed in Red Hat Enterprise 5 and 6 via https://rhn.redhat.com/errata/RHSA-2012-0051.html and https://rhn.redhat.com/errata/RHSA-2012-0350.html.
Package: kernel (Red Hat Enterprise L
Cisco
Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability
vendor_cisco
CVE-2012-4622 Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability
CVE-2012-4622: Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability
The Catalyst 4500E series switch with Supervisor Engine 7L-E contains a denial of service (DoS) vulnerability when processing specially crafted packets that can cause a reload of the device. Cisco has released software updates that address this vulnerability.
CWE: CWE-119, CWE-119
Bug IDs: CSCty88456, CSCty88456
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/85821http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ecchttp://www.securityfocus.com/bid/55701http://www.securitytracker.com/id?1027573https://exchange.xforce.ibmcloud.com/vulnerabilities/78886http://osvdb.org/85821http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ecchttp://www.securityfocus.com/bid/55701http://www.securitytracker.com/id?1027573https://exchange.xforce.ibmcloud.com/vulnerabilities/78886
2012-09-27
Published