CVE-2009-0635

Опубликовано: 27 мар. 2009

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets.

Ссылки

http://secunia.com/advisories/34438
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml
Patch
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34246
http://www.securitytracker.com/id?1021895
http://www.vupen.com/english/advisories/2009/0851
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49417
http://secunia.com/advisories/34438
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90459.shtml
Patch
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34246
http://www.securitytracker.com/id?1021895
http://www.vupen.com/english/advisories/2009/0851
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49417

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01415

Низкий

7.1 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-jrx8-5mjp-vjpm

github

почти 4 года назад