CVE-2012-4643 — HIGH (7.1) — White Hats Nepal

Vulnerability Description

The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068.

CVSS Score

7.1

HIGH

AV:N/AC:M/Au:N/C:N/I:N/A:C

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Cisco	Adaptive Security Appliance Software	7.0
Cisco	5500 Series Adaptive Security Appliance	All versions
Cisco	Catalyst 6500	All versions
Cisco	Catalyst 6503-E	-
Cisco	Catalyst 6504-E	-
Cisco	Catalyst 6506-E	-
Cisco	Catalyst 6509-E	-
Cisco	Catalyst 6509-Neb-A	-
Cisco	Catalyst 6509-V-E	-
Cisco	Catalyst 6513	-
Cisco	Catalyst 6513-E	-

Related Weaknesses (CWE)

CWE-399

References

FAQ

What is CVE-2012-4643?

CVE-2012-4643 is a vulnerability with a CVSS score of 7.1 (HIGH). The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 befor...

How severe is CVE-2012-4643?

CVE-2012-4643 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-4643?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Adaptive Security Appliance Software, Cisco 5500 Series Adaptive Security Appliance, Cisco Catalyst 6500, Cisco Catalyst 6503-E, Cisco Catalyst 6504-E.