CVE-2012-3950

Cisco IOS 12.3-12.4, 15.0-15.2 - Denial of Service via DNS Packets

Title source: llm
STIX 2.1

Description

The Intrusion Prevention System (IPS) feature in Cisco IOS 12.3 through 12.4 and 15.0 through 15.2, in certain configurations of enabled categories and missing signatures, allows remote attackers to cause a denial of service (device reload) via DNS packets, aka Bug ID CSCtw55976.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55695
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/78882
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50777
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027580

Scores

EPSS 0.0155
EPSS Percentile 72.4%

Details

CWE
CWE-399
Status published
Products (50)
cisco/ios 12.3
cisco/ios 12.3\(1a\)
cisco/ios 12.3\(2\)ja
cisco/ios 12.3\(2\)ja5
cisco/ios 12.3\(2\)jk
cisco/ios 12.3\(2\)jk1
cisco/ios 12.3\(2\)t3
cisco/ios 12.3\(2\)t8
cisco/ios 12.3\(2\)xa4
cisco/ios 12.3\(2\)xa5
... and 40 more
Published Sep 27, 2012
Tracked Since Feb 18, 2026