Denial of Service Vulnerability in Cisco Adaptive Security Appliances and Catalyst Devices

CVE-2012-4643

Summary

The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services Module in Cisco Catalyst 6500 series devices is susceptible to a denial of service vulnerability due to improper memory allocation for DHCP packets. This issue allows remote attackers to trigger device reloads by sending specially crafted IPv4 packets. The affected devices are running various software versions prior to the specified updates and can be exploited easily, resulting in potential service outages.

References