CVE-2011-0945

2011-10-0323:55:00

CWE-399

[email protected]

web.nvd.nist.gov

cisco

ios

dlsw

memory leak

cve-2011-0945

denial of service

nvd

6.8 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

51.7%

JSON

Memory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when implemented over Fast Sequence Transport (FST), allows remote attackers to cause a denial of service (memory consumption and device reload or hang) via a crafted IP protocol 91 packet, aka Bug ID CSCth69364.

CPENameOperatorVersion
cisco:ioscisco ioseq12.3ym
cisco:ioscisco ioseq12.3yq
cisco:ioscisco ioseq12.3xr
cisco:ioscisco ioseq12.4t
cisco:ioscisco ioseq12.1xm
cisco:ioscisco ioseq12.1xi
cisco:ioscisco ioseq12.3ya
cisco:ioscisco ioseq12.1xp
cisco:ioscisco ioseq12.2cz
cisco:ioscisco ioseq12.4xq

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.3ym
cisco:ios	cisco ios	eq	12.3yq
cisco:ios	cisco ios	eq	12.3xr
cisco:ios	cisco ios	eq	12.4t
cisco:ios	cisco ios	eq	12.1xm
cisco:ios	cisco ios	eq	12.1xi
cisco:ios	cisco ios	eq	12.3ya
cisco:ios	cisco ios	eq	12.1xp
cisco:ios	cisco ios	eq	12.2cz
cisco:ios	cisco ios	eq	12.4xq