CVE-2011-3273
published 2011-10-03CVE-2011-3273: Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is configured, allows remote attackers to cause a denial of service…
PriorityP433high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.77%
75.8th percentile
Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is configured, allows remote attackers to cause a denial of service (memory consumption or device crash) via vectors that trigger many session creation flows, aka Bug ID CSCti79848.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c35x-v8hf-66rw: Memory leak in Cisco IOS 15
ghsa_unreviewed·2022-05-17
CVE-2011-3273 [HIGH] GHSA-c35x-v8hf-66rw: Memory leak in Cisco IOS 15
Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall (aka ZBFW) is configured, allows remote attackers to cause a denial of service (memory consumption or device crash) via vectors that trigger many session creation flows, aka Bug ID CSCti79848.
Cisco
Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities
vendor_cisco·2011-09-28·CVSS 7.8
CVE-2011-3273 [HIGH] Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities
Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities
Cisco IOS Software contains two vulnerabilities related to Cisco IOS
Intrusion Prevention System (IPS) and Cisco IOS Zone-Based Firewall features.
These vulnerabilities are:
Memory leak in Cisco IOS Software
Cisco IOS Software Denial of Service when processing specially
crafted HTTP packets
Cisco has released software updates that address these vulnerabilities.
Workarounds that mitigate these vulnerabilities are not
available.
This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-zbfw.
Note: The September 28, 2011, Cisco IOS Software
Security Advisory bundled publication includes ten Cisco Security Advisories.
Nine of the advisories address vulnerabil
Cisco
Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities
vendor_cisco
CVE-2011-3273 Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities
CVE-2011-3273: Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities
Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System (IPS) and Cisco IOS Zone-Based Firewall features. These vulnerabilities are: Memory leak in Cisco IOS Software Cisco IOS Software Denial of Service when processing specially crafted HTTP packets Cisco has released software updates that address these vulnerabilities.
Bug IDs: CSCti79848, CSCto68554, CSCtq28732, CSCti79848, CSCto68554
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2011-10-03
Published