CVE-2011-2586

Cisco IOS 12.4 and 15.0 - Denial of Service via Malformed HTTP Response

Title source: llm

Description

The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=24436

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027005

Scores

EPSS 0.0120

EPSS Percentile 64.6%

Details

CWE

CWE-20

Status published

Products (2)

cisco/ios 12.4

cisco/ios 15.0

Published May 02, 2012

Tracked Since Feb 18, 2026