Sign-up

ID

VAR-201205-0010


CVE

CVE-2011-2578


TITLE

Cisco IOS Service disruption in ( Memory consumption ) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-002210

DESCRIPTION

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366. IOS is prone to a denial-of-service vulnerability. Cisco IOS is an operating system developed by Cisco in the United States for its network equipment

Trust: 1.98

sources: NVD: CVE-2011-2578 // JVNDB: JVNDB-2012-002210 // BID: 78475 // VULHUB: VHN-50523

AFFECTED PRODUCTS

vendor:ciscomodel:iosscope:eqversion:15.2

Trust: 2.7

vendor:ciscomodel:iosscope:eqversion:15.1

Trust: 2.7

sources: BID: 78475 // JVNDB: JVNDB-2012-002210 // CNNVD: CNNVD-201205-030 // NVD: CVE-2011-2578

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-2578
value: HIGH

Trust: 1.0

NVD: CVE-2011-2578
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201205-030
value: HIGH

Trust: 0.6

VULHUB: VHN-50523
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2011-2578
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-50523
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-50523 // JVNDB: JVNDB-2012-002210 // CNNVD: CNNVD-201205-030 // NVD: CVE-2011-2578

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-50523 // JVNDB: JVNDB-2012-002210 // NVD: CVE-2011-2578

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201205-030

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201205-030

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-002210

PATCH
title:Release 15.1(4)M Caveatsurl:http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-4MCAVS.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2012-002210

EXTERNAL IDS
db:NVDid:CVE-2011-2578
Trust: 2.8
db:SECTRACKid:1027005
Trust: 1.4
db:JVNDBid:JVNDB-2012-002210
Trust: 0.8
db:CNNVDid:CNNVD-201205-030
Trust: 0.7
db:BIDid:78475
Trust: 0.4
db:VULHUBid:VHN-50523
Trust: 0.1
sources:
            
            
            VULHUB: VHN-50523 // 
            
            
            
            BID: 78475 // 
            
            
            
            JVNDB: JVNDB-2012-002210 // 
            
            
            
            CNNVD: CNNVD-201205-030 // 
            
            
            
            NVD: CVE-2011-2578

REFERENCES
url:http://www.cisco.com/en/us/docs/ios/15_1/release/notes/151-4mcavs.html
Trust: 2.0
url:http://www.securitytracker.com/id?1027005
Trust: 1.4
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/75338
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-2578
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-2578
Trust: 0.8
sources:
            
            
            VULHUB: VHN-50523 // 
            
            
            
            BID: 78475 // 
            
            
            
            JVNDB: JVNDB-2012-002210 // 
            
            
            
            CNNVD: CNNVD-201205-030 // 
            
            
            
            NVD: CVE-2011-2578

CREDITS
Unknown
Trust: 0.3
sources:
            
            
            BID: 78475

SOURCES
db:VULHUBid:VHN-50523
db:BIDid:78475
db:JVNDBid:JVNDB-2012-002210
db:CNNVDid:CNNVD-201205-030
db:NVDid:CVE-2011-2578

LAST UPDATE DATE
2025-04-11T22:49:39.423000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-50523date:2017-12-14T00:00:00
db:BIDid:78475date:2012-05-02T00:00:00
db:JVNDBid:JVNDB-2012-002210date:2012-05-08T00:00:00
db:CNNVDid:CNNVD-201205-030date:2012-05-03T00:00:00
db:NVDid:CVE-2011-2578date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-50523date:2012-05-02T00:00:00
db:BIDid:78475date:2012-05-02T00:00:00
db:JVNDBid:JVNDB-2012-002210date:2012-05-08T00:00:00
db:CNNVDid:CNNVD-201205-030date:2012-05-03T00:00:00
db:NVDid:CVE-2011-2578date:2012-05-02T10:09:21.097