PT-2011-4361 · Cisco · Cisco Ios Xe+1

Publicado 2011-10-03 · Atualizado 2011-10-21 · CVE-2011-3272

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.1 Cisco IOS XE versions 2.1.x through 3.3.x

Description The IP Service Level Agreement (IP SLA) functionality allows remote attackers to cause a denial of service, resulting in memory corruption and device reload, via malformed IP SLA packets.

Recommendations For Cisco IOS version 15.1, update to a version that fixes the issue. For Cisco IOS XE versions 2.1.x through 3.3.x, update to a version that fixes the issue. As a temporary workaround, consider disabling the IP SLA functionality until a patch is available.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-3272

Produtos afetados

Cisco Ios

Cisco Ios Xe

Referências · 4

• http://cisco.com/en/US/products/products_security_advisory09186a0080b95d4c.shtml · Aviso do Fabricante
• http://securitytracker.com/id?1026120 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=24122 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3272 · Nota de Segurança