1. Home
  2. CVE Database
  3. CVE-2012-3899
MEDIUM · 5.0

CVE-2012-3899

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and tra...

Vulnerability Description

sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
CiscoIntrusion Prevention System6.0
CiscoIps 4240All versions
CiscoIps 4250 SxAll versions
CiscoIps 4255All versions
CiscoIps 4260All versions
CiscoIps 4270-20All versions

Related Weaknesses (CWE)

CWE-399

References

FAQ

What is CVE-2012-3899?

CVE-2012-3899 is a vulnerability with a CVSS score of 5.0 (MEDIUM). sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and tra...

How severe is CVE-2012-3899?

CVE-2012-3899 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-3899?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Intrusion Prevention System, Cisco Ips 4240, Cisco Ips 4250 Sx, Cisco Ips 4255, Cisco Ips 4260.