CVE-2007-2461 The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM message that causes m...
HighCVSS 7.8
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocated for a local buffer. NOTE: this issue only occurs when multiple DHCP servers are used.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco pix | = 7.2 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2 | No fix listed |
References
- 25109 third-party-advisory
- 20070502 DHCP Relay Agent Vulnerability in Cisco PIX and ASA Appliances patch vendor-advisory
- VU#530057 patch third-party-advisory us-government-resource
- 35330 vdb-entry
- 23763 vdb-entry
- 1017999 vdb-entry
- 1018000 vdb-entry
- ADV-2007-1635 vdb-entry
- cisco-asa-dhcp-dos(34026) vdb-entry