{ "id": "CVE-2011-3295", "sourceIdentifier": "ykramarz@cisco.com", "published": "2012-05-02T10:09:21.473", "lastModified": "2012-10-30T03:55:59.597", "vulnStatus": "Modified", "descriptions": [ { "lang": "en", "value": "The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888." }, { "lang": "es", "value": "Los procesos NETIO y IPV4_IO en Cisco IOS XR v3.8 hasta v4.1, como los utilizados en el sistema Cisco Carrier Routing System y otros productos, permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumo de CPU) a trav\u00e9s de tr\u00e1fico de la red manipulado, tambi\u00e9n conocido como Bug ID CSCti59888." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8 }, "baseSeverity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-20" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "96F48419-AF66-4B50-ACBF-9E38287A64FA" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "EBB71A24-AA6C-4BAD-BD37-5C191751C9DF" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:3.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "3A20B6A9-27B7-4F42-B88D-F4AACC9BC24D" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:3.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "79164FAE-AE31-4DA2-B4C2-7879268BA29E" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:3.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "9B9A223A-7A0A-4E31-B8A1-C809373A799D" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:3.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "1ECAB9C3-9248-4663-ABAE-31FFC969EF3A" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:3.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "10596213-9D2B-48A3-A733-744D41E90419" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:3.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "A07DCCD1-85D5-4ED2-B845-8C6EAC7E9D9B" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "7F57421B-F54C-4C50-8B25-AF787E541C5A" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "3A865225-6AEA-430D-8DB6-E70F7ED5E547" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "5DA73AC0-1CD2-4B6B-940A-DBB0C97E2C09" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "39F8B336-0DFA-41CE-9EFF-89A09BBDC6D6" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:4.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "8A1D1B60-C94F-44BF-8194-7758394E31C3" }, { "vulnerable": true, "criteria": "cpe:2.3:o:cisco:ios_xr:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "06E63681-C89F-4569-A52C-B870D48E436C" } ] } ] } ], "references": [ { "url": "http://www-europe.cisco.com/cisco/software/release.html?mdfid=279879106&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577&sortparam=7", "source": "ykramarz@cisco.com" }, { "url": "http://www.securitytracker.com/id?1027005", "source": "ykramarz@cisco.com" }, { "url": "http://www.securitytracker.com/id?1027006", "source": "ykramarz@cisco.com" } ] }