fkie_cve-2011-3273

GHSA-c35x-v8hf-66rw

VAR-201110-0260

Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is configured, allows remote attackers to cause a denial of service (memory consumption or device crash) via vectors that trigger many session creation flows, aka Bug ID CSCti79848. The problem is Bug ID CSCti79848 It is a problem.Service disruption by inducing the creation of a large number of sessions by a third party ( Memory consumption or device crash ) There is a possibility of being put into a state. Cisco IOS is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issues to cause an affected device to reload, denying service to legitimate users. These issues are being tracked by Cisco Bug IDs CSCti79848 and CSCto68554. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

Cisco Security Advisory: Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities

Advisory ID: cisco-sa-20110928-zbfw

Revision 1.0

For Public Release 2011 September 28 1600 UTC (GMT)

+--------------------------------------------------------------------

Summary =======

Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System (IPS) and Cisco IOS Zone-Based Firewall features. These vulnerabilities are:

* Memory leak in Cisco IOS Software * Cisco IOS Software Denial of Service when processing specially crafted HTTP packets

Cisco has released free software updates that address these vulnerabilities.

Workarounds that mitiga…

Most recent entries from all

bdu:2014-00026

fkie_cve-2011-3273

GHSA-c35x-v8hf-66rw

gsd-2011-3273

VAR-201110-0260