CVE-2011-1640: High severity cisco ios vulnerability
Published Oct 22, 2011
·Updated
The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354.
Affected Software
1 affected component
Cisco IOS>=12.2<12.2\(33\)sxj1
Event History
Oct 22, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1640?
CVE-2011-1640 has been classified as a denial of service vulnerability that can crash devices.
2
How do I fix CVE-2011-1640?
To resolve CVE-2011-1640, upgrade to Cisco IOS version 12.2(33)SXJ1 or later.
3
What component is affected by CVE-2011-1640?
The ethernet-lldp component in Cisco IOS is affected by CVE-2011-1640.
4
How does CVE-2011-1640 allow an attack?
CVE-2011-1640 allows remote attackers to send crafted LLDPDUs that can lead to a device crash.
5
Which versions of Cisco IOS are vulnerable to CVE-2011-1640?
Cisco IOS versions prior to 12.2(33)SXJ1 are vulnerable to CVE-2011-1640.