CVE-2012-4643
Summary
| CVE | CVE-2012-4643 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-10-29 20:55:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
CompleteAV:N/AC:M/Au:N/C:N/I:N/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | 5500 Series Adaptive Security Appliance | All | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0\(0\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0\(1\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0\(2\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0\(4\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0\(5.2\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.0\(5\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.1 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.1\(2.27\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.1\(2.48\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.1\(2.49\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.1\(2.5\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.1\(2\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.1\(5\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(1.22\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(1\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.10\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.14\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.15\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.16\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.17\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.18\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.19\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.48\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.5\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.7\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2.8\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(2\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(3\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(4\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 7.2\(5\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.0 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.0\(2\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.0\(3\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.0\(4\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.0\(5\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.1 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2\(1\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2\(2\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2\(3.9\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2\(3\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2\(4.1\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2\(4.4\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2\(4\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.2\(5\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.3\(1\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.3\(2\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.4 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.4\(1.11\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.4\(1\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.4\(2.11\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.4\(2\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.5 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.5\(1.4\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.5\(1\) | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.6 | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | 8.6\(1\) | All | All | All |
| Hardware | Cisco | Catalyst 6500 | All | All | All | All |
| Hardware | Cisco | Catalyst 6503-e | - | All | All | All |
| Hardware | Cisco | Catalyst 6504-e | - | All | All | All |
| Hardware | Cisco | Catalyst 6506-e | - | All | All | All |
| Hardware | Cisco | Catalyst 6509-e | - | All | All | All |
| Hardware | Cisco | Catalyst 6509-neb-a | - | All | All | All |
| Hardware | Cisco | Catalyst 6509-v-e | - | All | All | All |
| Hardware | Cisco | Catalyst 6513 | - | All | All | All |
| Hardware | Cisco | Catalyst 6513-e | - | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco ASA 5500 Series and Cisco Catalyst 6500 Series DHCP Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| osvdb.org/86145 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.