CVE-2012-4643

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-10-29 · updated 2026-06-16
Weakness: CWE-399

Description

The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1 before 7.2(5.8), 7.2 before 7.2(5.8), 8.0 before 8.0(5.28), 8.1 before 8.1(2.56), 8.2 before 8.2(5.27), 8.3 before 8.3(2.31), 8.4 before 8.4(3.10), 8.5 before 8.5(1.9), and 8.6 before 8.6(1.5) does not properly allocate memory for DHCP packets, which allows remote attackers to cause a denial of service (device reload) via a series of crafted IPv4 packets, aka Bug ID CSCtw84068.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: 7.0, 7.0(0), 7.0(1), 7.0(2), 7.0(4), 7.0(5) (+53)
Cisco Catalyst 6500: all versions
Cisco Catalyst 6503-E: all versions
Cisco Catalyst 6504-E: all versions
Cisco Catalyst 6506-E: all versions
Cisco Catalyst 6509-E: all versions
Cisco Catalyst 6509-Neb-A: all versions
Cisco Catalyst 6509-V-E: all versions
Cisco Catalyst 6513: all versions
Cisco Catalyst 6513-E: all versions

References

Get alerted when CVE-2012-4643 or the next vulnerability affects your stack