Cisco PIX/ASA DHCP Relay Remote Denial of Service Vulnerability

Cisco PIX/ASA DHCP Relay Remote Denial of Service Vulnerability

Cisco PIX and ASA are prone to a remote denial-of-service vulnerability because the software fails to properly handle DHCP packets in certain circumstances.

Successfully exploiting this issue allows attackers with access to a LAN served by a vulnerable device to consume excessive memory resources. This will eventually cause the device to stop forwarding further packets, denying service to legitimate users.

This vulnerability affects software versions 7.2(1) through 7.2(2.14) for Cisco PIX and ASA devices.

This issue is being tracked by Cisco Bug ID CSCsh50277.