CVE-2012-5044 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco IOS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
5.4MEDIUMNVD
EPSS
0.4%
top 37.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS
Timeline
PublishedApr 23
Latest updateMay 17

Description

Cisco IOS before 15.3(1)T, when media flow-around is not used, allows remote attackers to cause a denial of service (media loops and stack memory corruption) via VoIP traffic, aka Bug ID CSCub45809.

CVSS vector

AV:N/AC:H/C:N/I:N/A:CExploitability: 4.9 | Impact: 6.9

Affected Packages1 packages

▶NVDcisco/ios15.2\(2\)t

🔴Vulnerability Details

2
GHSA
GHSA-h7xg-v6r4-rfh3: Cisco IOS before 15↗2022-05-17
▶
CVEList
CVE-2012-5044: Cisco IOS before 15↗2014-04-23
▶
CVE-2012-5044 — Cisco IOS vulnerability | cvebase