CVE-2011-0945

Cisco IOS 12.1-12.4 and 15.0-15.1 - Denial of Service via Crafted IP Protocol 91 Packet

Title source: llm

Description

Memory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when implemented over Fast Sequence Transport (FST), allows remote attackers to cause a denial of service (memory consumption and device reload or hang) via a crafted IP protocol 91 packet, aka Bug ID CSCth69364.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4e.shtml

Various Sources x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=24116

Scores

EPSS 0.0177

EPSS Percentile 75.8%

Details

CWE

CWE-399

Status published

Products (50)

cisco/ios 12.1

cisco/ios 12.1t

cisco/ios 12.1xi

cisco/ios 12.1xj

cisco/ios 12.1xl

cisco/ios 12.1xm

cisco/ios 12.1xp

cisco/ios 12.1xq

cisco/ios 12.1xr

cisco/ios 12.1xs

... and 40 more

Published Oct 03, 2011

Tracked Since Feb 18, 2026