CVE-2011-3295

Cisco IOS XR 3.8-4.1 - Denial of Service via Crafted Network Traffic

Title source: llm

Description

The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027005

Various Sources x_refsource_confirm

http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027006

Scores

EPSS 0.0180

EPSS Percentile 75.9%

Details

CWE

CWE-20

Status published

Products (14)

cisco/ios_xr 3.8.0

cisco/ios_xr 3.8.1

cisco/ios_xr 3.8.2

cisco/ios_xr 3.8.3

cisco/ios_xr 3.8.4

cisco/ios_xr 3.9.0

cisco/ios_xr 3.9.1

cisco/ios_xr 3.9.2

cisco/ios_xr 4.0.0

cisco/ios_xr 4.0.1

... and 4 more

Published May 02, 2012

Tracked Since Feb 18, 2026