CVE-2008-3811: Input Validation

Published Sep 26, 2008

Updated

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810.

Affected Software

17 affected components

Cisco IOS=12.4md

Cisco IOS=12.4mr

Cisco IOS=12.4sw

Cisco IOS=12.4t

Cisco IOS=12.4xc

Cisco IOS=12.4xe

Cisco IOS=12.4xf

Cisco IOS=12.4xg

Cisco IOS=12.4xj

Cisco IOS=12.4xk

Cisco IOS=12.4xl

Cisco IOS=12.4xm

Cisco IOS=12.4xn

Cisco IOS=12.4xp

Cisco IOS=12.4xt

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml

Event History

Sep 26, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3811?

CVE-2008-3811 is considered a high severity vulnerability due to its potential to cause a denial of service by forcing device reload.

How do I fix CVE-2008-3811?

To fix CVE-2008-3811, disable NAT Skinny Call Control Protocol (SCCP) Fragmentation Support on affected Cisco IOS versions.

Which Cisco IOS versions are affected by CVE-2008-3811?

CVE-2008-3811 affects multiple versions of Cisco IOS including 12.4t, 12.4xj, 12.4xl, and others.

Can CVE-2008-3811 be exploited remotely?

Yes, CVE-2008-3811 can be exploited remotely by attackers sending segmented SCCP messages.

Is there a workaround for CVE-2008-3811?

The primary workaround for CVE-2008-3811 is to disable the specific SCCP fragmentation feature on the device.