CVE-2012-5415

Published: Apr 16, 2013Modified: Apr 29, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272.

Affected (4)

Products: Cisco: 5500 Adaptive Security Appliance, 5500 Series Adaptive Security Appliance, Adaptive Security Appliance

Cisco

3 products

5500 Adaptive Security Appliance

5500 Series Adaptive Security Appliance

Adaptive Security Appliance

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco 5500 Adaptive Security Appliance	Version 7.2 2
Cisco 5500 Series Adaptive Security Appliance	All versions
Cisco 5500 Series Adaptive Security Appliance	Version 7.2
Cisco Adaptive Security Appliance	All versions

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5415

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5415

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.