Cisco IOS XR SPA Interface Processor Remote Denial of Service Vulnerability

Bugtraq ID:	47983
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1651
Remote:	Yes
Local:	No
Published:	May 25 2011 12:00AM
Updated:	May 25 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS XR 3.9.1 Cisco IOS XR 3.9 Cisco Ios Xr 4.1.0 Cisco Ios Xr 4.0.1 Cisco Ios Xr 4.0.0 Cisco Ios Xr 3.9.2 Cisco Cisco XR 12000 SIP-601 Cisco Cisco XR 12000 SIP-600 Cisco Cisco XR 12000 SIP-501 Cisco Cisco XR 12000 SIP-401
Not Vulnerable:	Cisco Ios Xr 4.1.1 Cisco Ios Xr 4.0.3

Cisco IOS XR SPA Interface Processor Remote Denial of Service Vulnerability

Cisco IOS XR is prone to a remote denial-of-service vulnerability that affects the Shared Port Adapters (SPA) interface processor.

An attacker can exploit this issue to cause a denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCto45095.

Cisco IOS XR SPA Interface Processor Remote Denial of Service Vulnerability

Attackers can exploit this issue with readily available network utilities.

Cisco IOS XR SPA Interface Processor Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco IOS XR SPA Interface Processor Remote Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• cisco-sa-20110525-iosxrspa (Cisco)
  
• Cisco Security Advisory: Cisco XR 12000 Series Shared Port Adapters Interface Pr (Cisco)