CVE-2011-3283

Published: May 2, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service (Metro subsystem crash) via a fragmented GRE packet, aka Bug ID CSCts14887.

Affected (1)

Products: Cisco: Carrier Routing System

Cisco

1 product

Carrier Routing System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Carrier Routing System	Version 3.9.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.cisco.com/cisco/software/release.html?mdfid=280777815&softwareid=280867577&release=3.9.1

Source: psirt@cisco.com

Patch

http://www.securitytracker.com/id?1027006

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/75341

Source: psirt@cisco.com

http://www.cisco.com/cisco/software/release.html?mdfid=280777815&softwareid=280867577&release=3.9.1

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securitytracker.com/id?1027006

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/75341

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.