Cisco IOS WAAS and MACE Multiple Denial of Service Vulnerabilities

Bugtraq ID:	52751
Class:	Design Error
CVE:	CVE-2012-1312 CVE-2012-1314
Remote:	Yes
Local:	No
Published:	Mar 28 2012 12:00AM
Updated:	Mar 19 2015 09:14AM
Credit:	Cisco
Vulnerable:	Cisco Ios 15.2T Cisco Ios 15.2S Cisco Ios 15.2GC Cisco Ios 15.1SNH Cisco Ios 15.1SNG Cisco IOS 15.1S Cisco IOS 15.1MR Cisco IOS 15.1M Cisco IOS 15.1GC Cisco IOS 15.1EY Cisco Ios 15.1 SG
Not Vulnerable:	Cisco Ios 15.2(3)T Cisco Ios 15.2(2)T1 Cisco Ios 15.2(1)T2 Cisco Ios 15.2(1)GC2 Cisco Ios 15.1(4)M4 Cisco Ios 15.1(3)T3 Cisco Ios 15.1(2)GC2 Cisco Ios 15.1(2)EY2

Cisco IOS WAAS and MACE Multiple Denial of Service Vulnerabilities

Cisco IOS is prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to cause an affected device to leak memory or reload, denying service to legitimate users.

These issues are being tracked by Cisco Bug IDs:

CSCtt45381
CSCtq64987
CSCtu57226

Cisco IOS WAAS and MACE Multiple Denial of Service Vulnerabilities

To exploit these issues, attackers can use readily available network utilities.

Cisco IOS WAAS and MACE Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Cisco IOS WAAS and MACE Multiple Denial of Service Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features (Cisco)