CVE-2010-2836

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.

Fuga de memoria en la funcionalidad SSL VPN en Cisco IOS v12.4, v15.0, y v15.1, cuando HTTP port redirection está habilitado, permite a atacantes remotos causar una denegación de servicio (corrupción de memoria) al desconectar incorrectamente sesiones SSL generando que las conexiones permanezcan en estado CLOSE-WAIT, también conocido como fallo ID CSCtg21685.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-07-23 CVE Reserved
2010-09-23 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-399: Resource Management Errors

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml	2010-09-24

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4 Search vendor "Cisco" for product "Ios" and version "12.4"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4gc Search vendor "Cisco" for product "Ios" and version "12.4gc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4mda Search vendor "Cisco" for product "Ios" and version "12.4mda"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4mr Search vendor "Cisco" for product "Ios" and version "12.4mr"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4mra Search vendor "Cisco" for product "Ios" and version "12.4mra"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4sw Search vendor "Cisco" for product "Ios" and version "12.4sw"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xa Search vendor "Cisco" for product "Ios" and version "12.4xa"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xb Search vendor "Cisco" for product "Ios" and version "12.4xb"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xc Search vendor "Cisco" for product "Ios" and version "12.4xc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xd Search vendor "Cisco" for product "Ios" and version "12.4xd"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xe Search vendor "Cisco" for product "Ios" and version "12.4xe"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xf Search vendor "Cisco" for product "Ios" and version "12.4xf"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xg Search vendor "Cisco" for product "Ios" and version "12.4xg"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xj Search vendor "Cisco" for product "Ios" and version "12.4xj"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xk Search vendor "Cisco" for product "Ios" and version "12.4xk"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xl Search vendor "Cisco" for product "Ios" and version "12.4xl"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xm Search vendor "Cisco" for product "Ios" and version "12.4xm"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xn Search vendor "Cisco" for product "Ios" and version "12.4xn"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xp Search vendor "Cisco" for product "Ios" and version "12.4xp"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xt Search vendor "Cisco" for product "Ios" and version "12.4xt"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xv Search vendor "Cisco" for product "Ios" and version "12.4xv"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xw Search vendor "Cisco" for product "Ios" and version "12.4xw"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xy Search vendor "Cisco" for product "Ios" and version "12.4xy"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xz Search vendor "Cisco" for product "Ios" and version "12.4xz"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4ya Search vendor "Cisco" for product "Ios" and version "12.4ya"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4yb Search vendor "Cisco" for product "Ios" and version "12.4yb"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4yd Search vendor "Cisco" for product "Ios" and version "12.4yd"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.0m Search vendor "Cisco" for product "Ios" and version "15.0m"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.0xa Search vendor "Cisco" for product "Ios" and version "15.0xa"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.1\(1\)xb1 Search vendor "Cisco" for product "Ios" and version "15.1\(1\)xb1"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.1t Search vendor "Cisco" for product "Ios" and version "15.1t"		-		Affected