Skip to content
Back to search

CVE-2011-0945

HIGH
7.8NVD

Summary

generated automatically from NVD data

CVE-2011-0945 is a memory leak in the Data-link switching (DLSw) feature of Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and of IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when DLSw is implemented over Fast Sequence Transport (FST). A remote attacker can send a crafted IP protocol 91 packet to exhaust memory, causing the device to reload or hang (Bug ID CSCth69364). It is rated CVSS v2.0 7.8 (HIGH) and is categorized as CWE-399.

NVD description

Memory leak in the Data-link switching (aka DLSw) feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when implemented over Fast Sequence Transport (FST), allows remote attackers to cause a denial of service (memory consumption and device reload or hang) via a crafted IP protocol 91 packet, aka Bug ID CSCth69364.

Share:

EPSS · FIRST.org

1.8%probability of exploitation in the next 30 days

Higher than 77% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.

CVSS v2.0 Score

7.8
/ 10.0
HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C

Information

Published
3 oct. 2011
Updated
16 juin 2026
Status
Modified
Source
psirt@cisco.com

Affected products

cisco ios
Versions : 12.1, 12.1t, 12.1xi, 12.1xj, 12.1xl
cisco ios xeAll Cisco IOS XE CVEs →
Versions : 3.1.0s, 3.1.1s, 3.1.2s, 3.2.0s

Weaknesses (CWE)

CWE-399

References (4)

Similar CVEs

Other vulnerabilities of type CWE-399

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring