CVE:CVE-2012-4643
CNNVD:CNNVD-201210-241
Cisco ASA是美国思科（Cisco）公司的一套防火墙设备。该设备还包括IPS（入侵防御系统）、SSL VPN、IPSec VPN、反垃圾邮件等功能。
Cisco Adaptive Security Appliances (ASA) 5500系列设备中的DHCP服务器、Cisco Catalyst 6500系列设备软件7.2(5.8)之前的7.0版本、7.2(5.8)之前的7.1版本、7.2(5.8)之前的7.2版本、8.0(5.28)之前的8.0版本、8.1(2.56)之前的8.1版本、8.2(5.27)之前的8.2版本、8.3(2.31)之前的8.3版本、8.4(3.10)之前的8.4版本、8.5(1.9)之前的8.5版本、8.6(1.5)之前的8.6版本中的ASA Services Module (ASASM)中存在漏洞，该漏洞源于没有正确为DHCP报文分配内存。远程攻击者利用该漏洞通过一系列特制的IPv4报文，导致拒绝服务（设备重载）。
solution:Upgrade cisco adaptive_security_appliance_software to a higher version than 7.0,7.0(0,7.0(1,7.0(2,7.0(4,7.0(5,7.0(5.2,7.1,7.1(2,7.1(2.5,7.1(2.27,7.1(2.48,7.1(2.49,7.1(5,7.2,7.2(1,7.2(1.22,7.2(2,7.2(2.5,7.2(2.7,7.2(2.8,7.2(2.10,7.2(2.14,7.2(2.15,7.2(2.16,7.2(2.17,7.2(2.18,7.2(2.19,7.2(2.48,7.2(3,7.2(4,7.2(5,8.0,8.0(2,8.0(3,8.0(4,8.0(5,8.1,8.2,8.2(1,8.2(2,8.2(3,8.2(3.9,8.2(4,8.2(4.1,8.2(4.4,8.2(5,8.3(1,8.3(2,8.4,8.4(1,8.4(1.11,8.4(2,8.4(2.11,8.5,8.5(1,8.5(1.4,8.6,8.6(1,and avoid the version 7.0,7.0(0),7.0(1),7.0(2),7.0(4),7.0(5),7.0(5.2),7.1,7.1(2),7.1(2.5),7.1(2.27),7.1(2.48),7.1(2.49),7.1(5),7.2,7.2(1),7.2(1.22),7.2(2),7.2(2.5),7.2(2.7),7.2(2.8),7.2(2.10),7.2(2.14),7.2(2.15),7.2(2.16),7.2(2.17),7.2(2.18),7.2(2.19),7.2(2.48),7.2(3),7.2(4),7.2(5),8.0,8.0(2),8.0(3),8.0(4),8.0(5),8.1,8.2,8.2(1),8.2(2),8.2(3),8.2(3.9),8.2(4),8.2(4.1),8.2(4.4),8.2(5),8.3(1),8.3(2),8.4,8.4(1),8.4(1.11),8.4(2),8.4(2.11),8.5,8.5(1),8.5(1.4),8.6,8.6(1); Upgrade cisco 5500_series_adaptive_security_appliance to a higher version than *; Upgrade cisco catalyst_6500 to a higher version than *; Upgrade cisco catalyst_6503-e to a higher version than -; Upgrade cisco catalyst_6504-e to a higher version than -; Upgrade cisco catalyst_6506-e to a higher version than -; Upgrade cisco catalyst_6509-e to a higher version than -; Upgrade cisco catalyst_6509-neb-a to a higher version than -; Upgrade cisco catalyst_6509-v-e to a higher version than -; Upgrade cisco catalyst_6513 to a higher version than -; Upgrade cisco catalyst_6513-e to a higher version than -