CVE-2012-0382

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) via encapsulated IGMP data in an MSDP packet, aka Bug ID CSCtr28857.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/80693Broken Link
http://secunia.com/advisories/48630Not Applicable
http://secunia.com/advisories/48633Not Applicable
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdpVendor Advisory
http://www.securityfocus.com/bid/52759Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026868Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74431Third Party Advisory, VDB Entry
http://osvdb.org/80693Broken Link
http://secunia.com/advisories/48630Not Applicable
http://secunia.com/advisories/48633Not Applicable
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdpVendor Advisory
http://www.securityfocus.com/bid/52759Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026868Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74431Third Party Advisory, VDB Entry

Timeline

Published: Mar 29, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-03837.8Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, a CVE-2012-03847.2Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.CVE-2012-03857.8The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (device reload) by se CVE-2012-03867.8The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2 CVE-2012-03877.8Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers CVE-2012-03887.8Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to ca CVE-2012-03894.3Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x CVE-2012-03904.3The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a CVE-2012-03919.8The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception ha CVE-2012-03926.8The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to CVE-2012-03936.4The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attac CVE-2012-03946.8The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrar