Description
The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocated for a local buffer. NOTE: this issue only occurs when multiple DHCP servers are used.
References
- 20070502 DHCP Relay Agent Vulnerability in Cisco PIX and ASA Appliances vendor-advisory
- 23763 vdb-entry
- 1017999 vdb-entry
- VU#530057 third-party-advisory
- ADV-2007-1635 vdb-entry
- 1018000 vdb-entry
- cisco-asa-dhcp-dos(34026) vdb-entry
- 35330 vdb-entry
- 25109 third-party-advisory