CVE-2011-3274: Medium severity cisco ios vulnerability

Published Oct 3, 2011

Updated

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service (device crash) via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919.

Affected Software

37 affected components

cisco IOS=12.2\(33\)sre0a

cisco IOS=15.1

cisco IOS=15.0

cisco IOS=12.2sre

cisco IOS=12.2\(33\)sre3

cisco IOS=12.2\(33\)sre

cisco IOS=12.2\(33\)sre2

cisco IOS=12.2\(33\)sre1

Cisco IOS XE=2.5.0

Cisco IOS XE=2.6.1

Cisco IOS XE=3.2.0s

Cisco IOS XE=2.1.0

Cisco IOS XE=2.2.3

Cisco IOS XE=2.4.2

Cisco IOS XE=2.2.1

Cisco IOS XE=2.4.0

Cisco IOS XE=2.4.4

Cisco IOS XE=2.3.0

Cisco IOS XE=2.5.1

Cisco IOS XE=2.6.2

Cisco IOS XE=2.1.1

Cisco IOS XE=2.4.1

Cisco IOS XE=2.3.2

Cisco IOS XE=2.1.2

Cisco IOS XE=2.6.0

Cisco IOS XE=3.2.1s

Cisco IOS XE=3.1.2s

Cisco IOS XE=3.1.1s

Cisco IOS XE=3.2.2s

Cisco IOS XE=3.1.0s

Cisco IOS XE=3.1.4s

Cisco IOS XE=3.3.0s

Cisco IOS XE=2.4.3

Cisco IOS XE=2.5.2

Cisco IOS XE=3.1.3s

Cisco IOS XE=2.3.1

Cisco IOS XE=2.2.2

Event History

Oct 3, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3274?

CVE-2011-3274 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2011-3274?

To mitigate CVE-2011-3274, upgrade to the recommended Cisco IOS and IOS XE versions that include the fixes.

Which Cisco IOS versions are affected by CVE-2011-3274?

CVE-2011-3274 affects Cisco IOS versions 12.2SRE before 12.2(33)SRE4, 15.0, 15.1, and IOS XE versions 2.1.x through 3.3.x.

What is the impact of CVE-2011-3274?

The impact of CVE-2011-3274 includes a device crash caused by remote attackers sending crafted IPv6 packets.

Is there a workaround for CVE-2011-3274?

Currently, there are no documented workarounds for CVE-2011-3274 other than applying available software updates.