Cisco ios xr 3.8 to 4.1 NETIO and IPV4_IO process Denial of Service Vulnerabilities

Release date:
Updated on:

Affected Systems:
Cisco ios xr 3.8-4.1
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2011-3295

Cisco ios xr is a next-generation network and CISCO carrier Routing System (Cisco ios xr). It is a fully modular and fully distributed network interconnection operating system.

The NETIO and IPV4_IO processes in Cisco ios xr 3.8 to 4.1 used in Cisco Carrier Routing System and other products allow attackers to consume CPU resources through specially crafted network packets, system Denial of Service.

<* Source: vendor
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Cisco
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.cisco.com/warp/public/707/advisory.html