CVE-2011-4231: Input Validation
Published May 3, 2012
·Updated
Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors, aka Bug ID CSCtq61128.
Affected Software
25 affected components
cisco IOS=15.1
cisco IOS=15.2
Cisco IOS XE=3.1.0s
Cisco IOS XE=3.1.0sg
Cisco IOS XE=3.1.1s
Cisco IOS XE=3.1.1sg
Cisco IOS XE=3.1.2s
Cisco IOS XE=3.1.3s
Cisco IOS XE=3.1.4s
Cisco IOS XE=3.2.0s
Cisco IOS XE=3.2.0sg
Cisco IOS XE=3.2.1s
Cisco IOS XE=3.2.2s
Cisco IOS XE=3.3.0s
Cisco IOS XE=3.3.1s
Cisco IOS XE=3.3.2s
Cisco IOS XE=3.3.3s
Cisco IOS XE=3.4.0as
Cisco IOS XE=3.4.0s
Cisco IOS XE=3.4.1s
Cisco IOS XE=3.4.2s
Cisco IOS XE=3.4.3s
Cisco IOS XE=3.5.0s
Cisco IOS XE=3.5.1s
Cisco IOS XE=3.5.2s
Event History
May 3, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4231?
CVE-2011-4231 has been rated as a high severity vulnerability due to its potential for causing a denial of service.
2
How do I fix CVE-2011-4231?
To mitigate CVE-2011-4231, update your Cisco IOS to a version that has addressed this vulnerability.
3
Which Cisco IOS versions are affected by CVE-2011-4231?
CVE-2011-4231 affects Cisco IOS versions 15.1, 15.2, and IOS XE 3.x.
4
What type of vulnerability is CVE-2011-4231?
CVE-2011-4231 is a denial of service (DoS) vulnerability that can result in a device crash.
5
Can remote users exploit CVE-2011-4231?
Yes, remote authenticated users can exploit CVE-2011-4231 using unspecified vectors to cause a denial of service.