CVE-2011-3280: High severity cisco ios xe vulnerability

Published Oct 3, 2011

Updated

Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCtj04672.

Affected Software

189 affected components

Cisco IOS XE=3.1.0sg

Cisco IOS XE=3.1.1sg

cisco IOS=12.3yq

cisco IOS=12.3xr

cisco IOS=12.4t

cisco IOS=12.2sga

cisco IOS=12.3bc

cisco IOS=12.1e

cisco IOS=12.3ya

cisco IOS=12.2cz

cisco IOS=12.4xq

cisco IOS=12.2sxf

cisco IOS=12.2fy

cisco IOS=12.4mrb

cisco IOS=12.2irc

cisco IOS=12.2scb

cisco IOS=12.3xs

cisco IOS=12.2sx

cisco IOS=12.3xg

cisco IOS=12.4mra

cisco IOS=12.3bw

cisco IOS=12.3xd

cisco IOS=12.4xl

cisco IOS=12.2ys

cisco IOS=12.4xm

cisco IOS=12.3xw

cisco IOS=12.4mr

cisco IOS=12.2srb

cisco IOS=12.2su

cisco IOS=12.2ew

cisco IOS=12.2b

cisco IOS=12.2ixb

cisco IOS=12.2sea

cisco IOS=12.4xt

cisco IOS=12.2sq

cisco IOS=12.3xi

cisco IOS=15.1xb

cisco IOS=12.2yn

cisco IOS=12.2irf

cisco IOS=12.2sxa

cisco IOS=12.2ey

cisco IOS=12.2zx

cisco IOS=12.2seg

cisco IOS=12.3yj

cisco IOS=12.4gc

cisco IOS=12.2xb

cisco IOS=12.2yf

cisco IOS=12.2sg

cisco IOS=12.2ixf

cisco IOS=12.2sre

cisco IOS=12.2xna

cisco IOS=15.0mra

cisco IOS=12.2ym

cisco IOS=12.2yw

cisco IOS=12.3yu

cisco IOS=12.3xj

cisco IOS=12.3t

cisco IOS=12.3

cisco IOS=15.1t

cisco IOS=12.2zh

cisco IOS=12.2zu

cisco IOS=12.2yv

cisco IOS=12.2ixa

cisco IOS=12.2sxb

cisco IOS=12.2xnf

cisco IOS=12.2sca

cisco IOS=12.4xf

cisco IOS=12.2t

cisco IOS=12.2sv

cisco IOS=12.2seb

cisco IOS=15.0sg

cisco IOS=12.3xz

cisco IOS=12.2yt

cisco IOS=12.4jx

cisco IOS=12.2zya

cisco IOS=12.4xg

cisco IOS=12.4ya

cisco IOS=12.2yl

cisco IOS=12.2sed

cisco IOS=15.0s

cisco IOS=12.2za

cisco IOS=15.1gc

cisco IOS=15.0m

cisco IOS=12.2ez

cisco IOS=12.4xw

cisco IOS=12.2zb

cisco IOS=12.2sce

cisco IOS=12.2yg

cisco IOS=12.2ex

cisco IOS=12.2mra

cisco IOS=12.4xz

cisco IOS=15.1s

cisco IOS=12.2sbc

cisco IOS=12.2ixc

cisco IOS=12.2ira

cisco IOS=12.3xf

cisco IOS=12.3xl

cisco IOS=12.2yr

cisco IOS=12.2se

cisco IOS=12.1

cisco IOS=15.0sa

cisco IOS=12.2sxh

cisco IOS=12.4xd

cisco IOS=12.2sec

cisco IOS=15.0mr

cisco IOS=12.4xp

cisco IOS=12.4yd

cisco IOS=12.2ird

cisco IOS=12.2sb

cisco IOS=12.3yt

cisco IOS=12.2sy

cisco IOS=12.3xb

cisco IOS=12.2ixg

cisco IOS=12.4mda

cisco IOS=12.3yz

cisco IOS=12.2ixh

cisco IOS=12.2zy

cisco IOS=12.3xu

cisco IOS=12.4yg

cisco IOS=12.3xc

cisco IOS=12.4

cisco IOS=12.2tpc

cisco IOS=12.2ewa

cisco IOS=12.2bc

cisco IOS=12.3xe

cisco IOS=12.2srd

cisco IOS=12.4mdb

cisco IOS=12.2ze

cisco IOS=12.2xne

cisco IOS=12.3tpc

cisco IOS=12.2xnb

cisco IOS=12.2scc

cisco IOS=12.4xa

cisco IOS=12.2yy

cisco IOS=12.2fx

cisco IOS=12.2sz

cisco IOS=12.3za

cisco IOS=12.4xn

cisco IOS=12.2yu

cisco IOS=15.1ey

cisco IOS=12.2sxi

cisco IOS=12.3yx

cisco IOS=12.2ixd

cisco IOS=12.2bx

cisco IOS=12.3xq

cisco IOS=12.2cx

cisco IOS=12.2zl

cisco IOS=12.4md

cisco IOS=12.2yq

cisco IOS=12.2scd

cisco IOS=12.2sxj

cisco IOS=12.2sef

cisco IOS=12.2see

cisco IOS=12.3ys

cisco IOS=12.3jk

cisco IOS=12.2zf

cisco IOS=12.3b

cisco IOS=12.4yb

cisco IOS=12.2sra

cisco IOS=12.2irb

cisco IOS=12.2sm

cisco IOS=12.2ya

cisco IOS=12.4xb

cisco IOS=12.2

cisco IOS=12.3xx

cisco IOS=12.2xnc

cisco IOS=12.4xy

cisco IOS=12.4xr

cisco IOS=12.2sw

cisco IOS=15.0xa

cisco IOS=12.3xa

cisco IOS=12.2sxd

cisco IOS=12.2src

cisco IOS=12.2mrb

cisco IOS=15.0xo

cisco IOS=12.2yz

cisco IOS=12.2ire

cisco IOS=12.4ye

cisco IOS=12.2ixe

cisco IOS=12.3xk

cisco IOS=12.2yj

cisco IOS=12.2mc

cisco IOS=12.2yx

cisco IOS=12.2xo

cisco IOS=12.2sxe

cisco IOS=12.2yh

cisco IOS=12.2s

cisco IOS=12.2fz

cisco IOS=15.1m

Event History

Oct 3, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3280?

CVE-2011-3280 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2011-3280?

To fix CVE-2011-3280, upgrade the affected Cisco IOS or IOS XE software to a version that contains the necessary security patches.

What devices are affected by CVE-2011-3280?

CVE-2011-3280 affects multiple versions of Cisco IOS, including versions 12.1 through 12.4 and 15.0 through 15.1, as well as IOS XE 3.1.xSG.

What type of attacks does CVE-2011-3280 allow remote attackers to perform?

CVE-2011-3280 allows remote attackers to conduct denial-of-service attacks by sending crafted SIP packets to the device's UDP port 5060.

Is there a workaround for CVE-2011-3280?

A possible workaround for CVE-2011-3280 involves implementing access control lists to filter and restrict traffic on UDP port 5060.