Lucene search

K
cve[email protected]CVE-2011-0949
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-0949

2022-10-0316:15:18
CWE-399
web.nvd.nist.gov
24
cisco
ios xr
denial of service
disk consumption
sshv1
vulnerability
cve-2011-0949
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshd_lock files from /tmp/, which allows remote attackers to cause a denial of service (disk consumption) by making many SSHv1 connections, aka Bug ID CSCtd64417.

Affected configurations

NVD
Node
ciscoios_xrMatch3.6.0
OR
ciscoios_xrMatch3.6.1
OR
ciscoios_xrMatch3.6.2
OR
ciscoios_xrMatch3.6.3
OR
ciscoios_xrMatch3.8.0
OR
ciscoios_xrMatch3.8.1
OR
ciscoios_xrMatch3.8.2
OR
ciscoios_xrMatch3.9.0

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%