Cisco Firewall Services Module Protocol Independent Multicast (PIM) Denial of Service Vulnerability

Last Update Date: 4 Jun 2012 Release Date: 15 Mar 2012 4892 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability has been identified in Cisco Firewall Services Module. A remote user can cause denial of service conditions.

A remote user can send a specially crafted Protocol Independent Multicast (PIM) message to cause the target device to reload. Devices with multicast routing enabled are affected.

Impact

Denial of Service

System / Technologies affected

Cisco Catalyst 6500 Series FWSM; 3.1, 3.2, 4.0, 4.1

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (3.2(23), 4.1(8)).
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-fwsm

Vulnerability Identifier

CVE-2012-0356

Source

SecurityTracker