CVE-2011-3273: High severity Cisco IOS vulnerability

Published Oct 3, 2011

Updated

Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is configured, allows remote attackers to cause a denial of service (memory consumption or device crash) via vectors that trigger many session creation flows, aka Bug ID CSCti79848.

Affected Software

11 affected components

Cisco IOS=15.1

Cisco IOS=15.0

Cisco IOS=15.1xb

Cisco IOS=15.1t

Cisco IOS=15.0sg

Cisco IOS=15.1gc

Cisco IOS=15.0m

Cisco IOS=15.1s

Cisco IOS=15.0xa

Cisco IOS=15.0xo

Cisco IOS=15.1m

Event History

Oct 3, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3273?

CVE-2011-3273 has a severity rating that can lead to a denial of service, impacting device stability.

How do I fix CVE-2011-3273?

To fix CVE-2011-3273, update Cisco IOS to a version that does not have this vulnerability.

What does CVE-2011-3273 affect?

CVE-2011-3273 affects Cisco IOS versions 15.0 through 15.1 when IPS or Zone-Based Firewall is configured.

Can CVE-2011-3273 cause crashes?

Yes, CVE-2011-3273 can cause memory consumption leading to device crashes.

What configurations trigger CVE-2011-3273?

CVE-2011-3273 is triggered by vectors that create many session flows in systems using IPS or Zone-Based Firewall.