CVE-2011-3272
Last modified
CVE-2011-3272 is a vulnerability of currently unknown severity. The IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1, and IOS XE 2.1.x through 3.3.x, allows remote attackers to cause a denial of service (memory corruption and device reload) via malformed IP SLA packets, aka Bug ID CSCtk67073.. EPSS estimates a 2.56% chance of exploitation in the next 30 days.
Description
The IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1, and IOS XE 2.1.x through 3.3.x, allows remote attackers to cause a denial of service (memory corruption and device reload) via malformed IP SLA packets, aka Bug ID CSCtk67073.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 15.1 |
| Cisco | Ios Xe | 2.1.0 |
| Cisco | Ios Xe | 2.1.1 |
| Cisco | Ios Xe | 2.1.2 |
| Cisco | Ios Xe | 2.2.1 |
| Cisco | Ios Xe | 2.2.2 |
| Cisco | Ios Xe | 2.2.3 |
| Cisco | Ios Xe | 2.3.0 |
| Cisco | Ios Xe | 2.3.1 |
| Cisco | Ios Xe | 2.3.2 |
| Cisco | Ios Xe | 2.4.0 |
| Cisco | Ios Xe | 2.4.1 |
| Cisco | Ios Xe | 2.4.2 |
| Cisco | Ios Xe | 2.4.3 |
| Cisco | Ios Xe | 2.4.4 |
| Cisco | Ios Xe | 2.5.0 |
| Cisco | Ios Xe | 2.5.1 |
| Cisco | Ios Xe | 2.5.2 |
| Cisco | Ios Xe | 2.6.0 |
| Cisco | Ios Xe | 2.6.1 |
| Cisco | Ios Xe | 2.6.2 |
| Cisco | Ios Xe | 3.1.0s |
| Cisco | Ios Xe | 3.1.1s |
| Cisco | Ios Xe | 3.1.2s |
| Cisco | Ios Xe | 3.1.3s |
| Cisco | Ios Xe | 3.1.4s |
| Cisco | Ios Xe | 3.2.0s |
| Cisco | Ios Xe | 3.2.1s |
| Cisco | Ios Xe | 3.2.2s |
| Cisco | Ios Xe | 3.3.0s |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-3272?
How severe is CVE-2011-3272?
How do I fix CVE-2011-3272?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-3266The proto_tree_add_item function in Wireshark 1.6.0 through …
- CVE-2011-3267PHP before 5.3.7 does not properly implement the error_log f…
- CVE-2011-3268Buffer overflow in the crypt function in PHP before 5.3.7 al…
- CVE-2011-3269Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-…7.5
- CVE-2011-3270Unspecified vulnerability in Cisco IOS 12.2SB before 12.2(33…
- CVE-2011-3271Unspecified vulnerability in the Smart Install functionality…
- CVE-2011-3273Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone…
- CVE-2011-3274Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(3…
- CVE-2011-3275Memory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.…
- CVE-2011-3276Unspecified vulnerability in the NAT implementation in Cisco…
- CVE-2011-3277Unspecified vulnerability in the NAT implementation in Cisco…
- CVE-2011-3278Unspecified vulnerability in the NAT implementation in Cisco…
Are you affected by CVE-2011-3272?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST