PT-2011-4369

CVE-2011-3281

·

تاريخ النشر

2011-09-28

·

تاريخ التحديث

2012-05-14

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1
Description The issue allows remote attackers to cause a denial of service, resulting in a device reload or hang, via a crafted HTTP packet. This is related to certain HTTP Layer 7 Application Control and Inspection configurations. Additionally, there are vulnerabilities related to Cisco IOS Intrusion Prevention System (IPS) and Cisco IOS Zone-Based Firewall features, including a memory leak and a denial of service when processing specially crafted HTTP packets.
Recommendations For Cisco IOS versions 15.0 through 15.1, update to a version that addresses these vulnerabilities, as software updates have been released by Cisco. At the moment, there is no information about a workaround that mitigates these vulnerabilities.
قابلية الاستغلال
إصلاح
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾