CVE-2011-0939: High severity cisco ios vulnerability
Published Oct 3, 2011
·Updated
Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (device reload) via a crafted SIP message, aka Bug ID CSCth03022.
Affected Software
17 affected components
cisco IOS=15.1
cisco IOS=15.0
cisco IOS=12.4
Cisco IOS XE=2.5.0
Cisco IOS XE=2.6.1
Cisco IOS XE=3.2.0s
Cisco IOS XE=2.5.1
Cisco IOS XE=2.6.2
Cisco IOS XE=2.6.0
Cisco IOS XE=3.2.1s
Cisco IOS XE=3.1.2s
Cisco IOS XE=3.1.1s
Cisco IOS XE=3.2.2s
Cisco IOS XE=3.1.0s
Cisco IOS XE=3.1.4s
Cisco IOS XE=2.5.2
Cisco IOS XE=3.1.3s
Event History
Oct 3, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0939?
CVE-2011-0939 has a severity rating that indicates it can lead to a denial of service through device reload.
2
How do I fix CVE-2011-0939?
To fix CVE-2011-0939, upgrade to a fixed version of Cisco IOS or IOS XE as instructed in the security advisory.
3
What versions of Cisco IOS are affected by CVE-2011-0939?
CVE-2011-0939 affects Cisco IOS versions 12.4, 15.0, and 15.1.
4
Does CVE-2011-0939 affect IOS XE?
Yes, CVE-2011-0939 affects IOS XE versions 2.5.x through 3.2.x.
5
Can CVE-2011-0939 be exploited remotely?
Yes, CVE-2011-0939 can be exploited remotely via a crafted SIP message.