CVE-2012-0356: Cisco firewall services module software improper input validation vulnerability

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before 8.0(5.27), 8.1 before 8.1(2.53), 8.2 before 8.2(5.8), 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.2) and the Firewall Services Module (FWSM) 3.1 and 3.2 before 3.2(23) and 4.0 and 4.1 before 4.1(8) in Cisco Catalyst 6500 series devices, when multicast routing is enabled, allow remote attackers to cause a denial of service (device reload) via a crafted IPv4 PIM message, aka Bug IDs CSCtr47517 and CSCtu97367.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

13 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

5500 Series Adaptive Security Appliance Cisco Adaptive Security Appliance Software Cisco Catalyst 6500 Cisco Catalyst 6503 E Cisco Catalyst 6504 E Cisco Catalyst 6506 E Cisco Catalyst 6509 E Cisco Catalyst 6509 Neb A Cisco Catalyst 6509 V E Cisco Catalyst 6513 Cisco Catalyst 6513 E Cisco Firewall Services Module Cisco Firewall Services Module Software Cisco

References

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.