PT-2011-4362 · Cisco · Cisco Ios Xe+1

Published 2011-09-28 · Updated 2012-05-14 · CVE-2011-3274

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2SRE before 12.2(33)SRE4 Cisco IOS versions 15.0 and 15.1 Cisco IOS XE versions 2.1.x through 3.3.x

Description The issue allows remote attackers to cause a denial of service (device crash) via a crafted IPv6 packet, related to an expired MPLS TTL, when an MPLS domain is configured. This is related to two vulnerabilities that cause a Cisco IOS device to reload when processing IP version 6 (IPv6) packets over a Multiprotocol Label Switching (MPLS) domain.

Recommendations For Cisco IOS versions 12.2SRE before 12.2(33)SRE4, update to version 12.2(33)SRE4 or later. For Cisco IOS versions 15.0 and 15.1, update to a version that corrects the vulnerability as listed in the Cisco IOS Software Security Advisory. For Cisco IOS XE versions 2.1.x through 3.3.x, update to a version that corrects the vulnerability as listed in the Cisco IOS Software Security Advisory. As a temporary workaround, consider implementing workarounds that mitigate these vulnerabilities as available.

Fix

Related Identifiers

CVE-2011-3274

Affected Products

Cisco Ios

Cisco Ios Xe

References · 4

• http://cisco.com/en/US/products/products_security_advisory09186a0080b95d52.shtml · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-ipv6mpls · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3274 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=24125 · Note