CVE-2012-1366

Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.

Score

CVSS 2.0 6.1 Medium

Status

Modified - psirt@cisco.com

Published

2014-04-23

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Asr 1001 (Cisco)
• Asr 1002 (Cisco)
• Asr 1002-x (Cisco)
• Asr 1002 Fixed Router (Cisco)
• Asr 1004 (Cisco)
• Asr 1006 (Cisco)
• Asr 1013 (Cisco)
• Asr 1023 Router (Cisco)
• Asr 9000 Rsp440 Router (Cisco)
• Ios (Cisco)

References

• http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.pdf