First published: Wed May 02 2012(Updated: )
The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, allows remote attackers to cause a denial of service (device crash) via crafted network traffic, aka Bug ID CSCtf71673.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | =15.1 | |
Cisco IOS | =15.0 | |
Cisco IOS | =12.2 | |
Cisco IOS | =15.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-4016 has been classified as a denial of service vulnerability that can cause device crashes.
To fix CVE-2011-4016, update your Cisco IOS to a version that is not affected by this vulnerability.
CVE-2011-4016 affects Cisco IOS versions 12.2, 15.0, 15.1, and 15.2.
CVE-2011-4016 allows remote attackers to execute denial of service attacks through crafted network traffic.
There are no specific workarounds for CVE-2011-4016; updating the firmware is recommended.