CVE-2012-0381

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) by sending IKE UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCts38429.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-310

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/80700Broken Link
http://secunia.com/advisories/48605Not Applicable
http://secunia.com/advisories/48607Not Applicable
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ikeVendor Advisory
http://www.securityfocus.com/bid/52757Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026863Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74427Third Party Advisory, VDB Entry
http://osvdb.org/80700Broken Link
http://secunia.com/advisories/48605Not Applicable
http://secunia.com/advisories/48607Not Applicable
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-ikeVendor Advisory
http://www.securityfocus.com/bid/52757Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026863Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74427Third Party Advisory, VDB Entry

Timeline

Published: Mar 29, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-03827.5The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x t CVE-2012-03837.8Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, a CVE-2012-03847.2Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.CVE-2012-03857.8The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (device reload) by se CVE-2012-03867.8The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2 CVE-2012-03877.8Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers CVE-2012-03887.8Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to ca CVE-2012-03894.3Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x CVE-2012-03904.3The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a CVE-2012-03919.8The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception ha CVE-2012-03926.8The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to CVE-2012-03936.4The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attac