2012 年 9 月 26 日

シスコは半期に一度の Cisco IOS ソフトウェアセキュリティアドバイザリバンドル公開を 2012 年 9 月 26 日にリリースしました。お客様のフィードバックに直接対応するため、シスコは毎年 3 月と 9 月の第四水曜日に Cisco IOS ソフトウェアセキュリティアドバイザリのバンドルをリリースしています。この公開には、Cisco IOS ソフトウェアの脆弱性に対処するセキュリティアドバイザリが 8 件、Cisco Unified Communications Manager 脆弱性に対処するセキュリティアドバイザリが 1 件含まれています。それぞれの脆弱性が悪用されると、サービス拒否（DoS）状態、インターフェイスキューウェッジ、Border Gateway Protocol セッションのリセットが発生する場合があります。

Cisco IOS ソフトウェアチェッカーを使用すれば、特定の Cisco IOS ソフトウェアリリースがシスコ製品の脆弱性に該当するかどうかをすばやく判断できます。

Cisco Security
Intelligence Operations

イベントインテリジェンス

以下のテーブルに、この Cisco IOS ソフトウェアセキュリティアドバイザリバンドル公開に関連する Cisco Security Intelligence Operations の内容とシスコの緩和策に関する情報を示します。

Cisco Security Advisory	Cisco Applied Mitigation Bulletin	Cisco IntelliShield Alert	CVE ID	CVSS Base Score	OVAL
cisco-sa-20120926-sip Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability	Identifying and Mitigating Exploitation of the Cisco Unified Communications Manager and Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability	Cisco IOS Software and Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability	CVE-2012-3949	7.8	cisco-sa-20120926-sip-CVE-2012-3949
cisco-sa-20120926-cucm Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability			CVE-2012-3949	7.8	OVAL definitions are currently provided only for vulnerabilities in Cisco IOS Software.
cisco-sa-20120926-ios-ips Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability	CVE-2012-3950	7.8	cisco-sa-20120926-ios-ips-CVE-2012-3950
cisco-sa-20120926-bgp Cisco IOS Software Malformed Border Gateway Protocol Attribute Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software Malformed Border Gateway Protocol Attribute Denial of Service Vulnerability	CVE-2012-4617	7.1	cisco-sa-20120926-bgp-CVE-2012-4617
cisco-sa-20120926-nat Cisco IOS Software Network Address Translation Vulnerabilities	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software NAT SIP ALG Denial of Service Vulnerability	CVE-2012-4618	7.8	cisco-sa-20120926-nat-CVE-2012-4618
		Cisco IOS Software IP NAT Denial of Service Vulnerability	CVE-2012-4619	7.8	cisco-sa-20120926-nat-CVE-2012-4619
cisco-sa-20120926-c10k-tunnels Cisco IOS Software Tunneled Traffic Queue Wedge Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software Tunneled Traffic Queue Wedge Denial of Service Vulnerability	CVE-2012-4620	7.8	cisco-sa-20120926-c10k-tunnels-CVE-2012-4620
cisco-sa-20120926-dhcp Cisco IOS Software DHCP Denial of Service Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software DHCP Denial of Service Vulnerability	CVE-2012-4621	7.8	cisco-sa-20120926-dhcp-CVE-2012-4621
cisco-sa-20120926-dhcpv6 Cisco IOS Software DHCP Version 6 Server Denial of Service Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS Software DHCP Version 6 Server Denial of Service Vulnerability	CVE-2012-4623	7.1	cisco-sa-20120926-dhcpv6-CVE-2012-4623
cisco-sa-20120926-ecc Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability	Refer to the Workarounds section of the associated Cisco Security Advisory	Cisco IOS XE Software Uncorrected ECC Failure Denial of Service Vulnerability	CVE-2012-4622	7.8	cisco-sa-20120926-ecc-CVE-2012-4622

Cisco Security Intelligence Operations に戻る

Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication

2012 年 9 月 26 日

イベント インテリジェンス

イベントインテリジェンス