Cisco IOS Queue Wedge CVE-2012-4620 Denial of Service Vulnerability

Bugtraq ID:	55696
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2012-4620
Remote:	Yes
Local:	No
Published:	Sep 26 2012 12:00AM
Updated:	Sep 26 2012 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 12.2(33)SRC1 Cisco IOS 12.2(33)SRC Cisco IOS 12.2(33)SB8 Cisco IOS 12.2(33)SB6 Cisco IOS 12.2(33)SB5 Cisco IOS 12.2(33)SB4 Cisco IOS 12.2(33)SB3 Cisco IOS 12.2(33)SB2 Cisco IOS 12.2(33)SB10 Cisco IOS 12.2(33)SB1 Cisco IOS 12.2(33)SB
Not Vulnerable:	Cisco IOS 12.2(33)SRD6 Cisco IOS 12.2(33)SRD3 Cisco IOS 12.2(33)SRD2 Cisco IOS 12.2(33)SRD1 Cisco IOS 12.2(33)SRC5 Cisco IOS 12.2(33)SRC4 Cisco IOS 12.2(33)SRC3 Cisco IOS 12.2(33)SRC2

Cisco IOS Queue Wedge CVE-2012-4620 Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to consume all available space in the affected interface queue, resulting in a queue wedge which may prevent new packets from being processed.

This issue is being tracked by Cisco Bug ID CSCts66808.

Cisco IOS Queue Wedge CVE-2012-4620 Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco IOS Queue Wedge CVE-2012-4620 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco IOS Queue Wedge CVE-2012-4620 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco IOS Homepage (Cisco Systems)
  
• Cisco IOS Software Tunneled Traffic Queue Wedge Vulnerability (Cisco)