CVE-2012-1315

Cisco IOS 12.4, 15.0, 15.1, and 15.2 - Denial of Service via SIP Inspection Memory Leak

Title source: llm

Description

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/52753

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-zbfw

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/48608

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1026861

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/74437

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/80699

Scores

EPSS 0.0201

EPSS Percentile 78.8%

Details

CWE

CWE-399

Status published

Products (4)

cisco/ios 12.4

cisco/ios 15.0

cisco/ios 15.1

cisco/ios 15.2

Published Mar 29, 2012

Tracked Since Feb 18, 2026