CVE-2012-1315
Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.99%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.99% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- cisco/ios
- Source
- psirt@cisco.com
References
- http://osvdb.org/80699
- http://secunia.com/advisories/48608
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfwVendor Advisory
- http://www.securityfocus.com/bid/52753
- http://www.securitytracker.com/id?1026861
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74437
- http://osvdb.org/80699
- http://secunia.com/advisories/48608
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfwVendor Advisory
- http://www.securityfocus.com/bid/52753
- http://www.securitytracker.com/id?1026861
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74437
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.