CVE-2011-3272

Cisco IOS and IOS XE - Denial of Service via Malformed IP SLA Packets

Title source: llm

Description

The IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1, and IOS XE 2.1.x through 3.3.x, allows remote attackers to cause a denial of service (memory corruption and device reload) via malformed IP SLA packets, aka Bug ID CSCtk67073.

References (3)

Core 3

Core References

Various Sources x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=24122

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4c.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1026120

Scores

EPSS 0.0256

EPSS Percentile 83.5%

Details

CWE

CWE-399

Status published

Products (30)

cisco/ios 15.1

cisco/ios_xe 2.1.0

cisco/ios_xe 2.1.1

cisco/ios_xe 2.1.2

cisco/ios_xe 2.2.1

cisco/ios_xe 2.2.2

cisco/ios_xe 2.2.3

cisco/ios_xe 2.3.0

cisco/ios_xe 2.3.1

cisco/ios_xe 2.3.2

... and 20 more

Published Oct 03, 2011

Tracked Since Feb 18, 2026