7.8

CVE-2010-2836

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version 12.4
Cisco ≫ Ios Version 12.4gc
Cisco ≫ Ios Version 12.4mda
Cisco ≫ Ios Version 12.4mr
Cisco ≫ Ios Version 12.4mra
Cisco ≫ Ios Version 12.4sw
Cisco ≫ Ios Version 12.4xa
Cisco ≫ Ios Version 12.4xb
Cisco ≫ Ios Version 12.4xc
Cisco ≫ Ios Version 12.4xd
Cisco ≫ Ios Version 12.4xe
Cisco ≫ Ios Version 12.4xf
Cisco ≫ Ios Version 12.4xg
Cisco ≫ Ios Version 12.4xj
Cisco ≫ Ios Version 12.4xk
Cisco ≫ Ios Version 12.4xl
Cisco ≫ Ios Version 12.4xm
Cisco ≫ Ios Version 12.4xn
Cisco ≫ Ios Version 12.4xp
Cisco ≫ Ios Version 12.4xt
Cisco ≫ Ios Version 12.4xv
Cisco ≫ Ios Version 12.4xw
Cisco ≫ Ios Version 12.4xy
Cisco ≫ Ios Version 12.4xz
Cisco ≫ Ios Version 12.4ya
Cisco ≫ Ios Version 12.4yb
Cisco ≫ Ios Version 12.4yd
Cisco ≫ Ios Version 15.0m
Cisco ≫ Ios Version 15.0xa
Cisco ≫ Ios Version 15.1t
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.76% 0.751
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml
Patch
Vendor Advisory