CVE-2012-1311: High severity cisco ios vulnerability

Published Mar 29, 2012

Updated

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge and service outage) via crafted RSVP packets, aka Bug ID CSCts80643.

Affected Software

7 affected components

cisco IOS=15.0

cisco IOS=15.1

Cisco IOS XE=3.2.0s

Cisco IOS XE=3.2.1s

Cisco IOS XE=3.2.2s

Cisco IOS XE=3.3.0s

Cisco IOS XE=3.4.0s

Event History

Mar 29, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-1311?

CVE-2012-1311 has a severity level that can lead to a denial of service, affecting network availability.

How do I fix CVE-2012-1311?

To fix CVE-2012-1311, upgrade to Cisco IOS version 15.2 or later, or IOS XE version 3.4.2S or later.

What systems are affected by CVE-2012-1311?

CVE-2012-1311 affects Cisco IOS 15.0, 15.1, and various versions of Cisco IOS XE prior to 3.4.2S when configured with a VRF interface.

What is the nature of the vulnerability in CVE-2012-1311?

CVE-2012-1311 allows remote attackers to cause denial of service through crafted RSVP packets.

Is CVE-2012-1311 related to specific configurations?

Yes, CVE-2012-1311 is related to the RSVP feature when a VRF interface is configured in the affected Cisco IOS versions.