PT-2011-4361 · Cisco · Cisco Ios Xe+1

Published 2011-10-03 · Updated 2011-10-21 · CVE-2011-3272

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.1 Cisco IOS XE versions 2.1.x through 3.3.x

Description The IP Service Level Agreement (IP SLA) functionality allows remote attackers to cause a denial of service, resulting in memory corruption and device reload, via malformed IP SLA packets.

Recommendations For Cisco IOS version 15.1, update to a version that fixes the issue. For Cisco IOS XE versions 2.1.x through 3.3.x, update to a version that fixes the issue. As a temporary workaround, consider disabling the IP SLA functionality until a patch is available.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-3272

Affected Products

Cisco Ios

Cisco Ios Xe

References · 4

• http://cisco.com/en/US/products/products_security_advisory09186a0080b95d4c.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3272 · Security Note
• http://securitytracker.com/id?1026120 · Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=24122 · Note