Skip to content
Back to search

CVE-2011-3275

HIGH
7.8NVD

Summary

generated automatically from NVD data

CVE-2011-3275 is a memory leak in Cisco IOS (versions 12.4, 15.0 and 15.1) and Cisco IOS XE (2.5.x through 3.2.x per the description). A remote attacker can send a crafted SIP message to make the device consume memory, causing a denial of service. The issue is tracked as Bug ID CSCti48504 and classified under CWE-399, with a CVSS v2.0 score of 7.8 (HIGH).

NVD description

Memory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service (memory consumption) via a crafted SIP message, aka Bug ID CSCti48504.

Share:

EPSS · FIRST.org

1.8%probability of exploitation in the next 30 days

Higher than 77% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.

CVSS v2.0 Score

7.8
/ 10.0
HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C

Information

Published
3 oct. 2011
Updated
16 juin 2026
Status
Modified
Source
psirt@cisco.com

Affected products

cisco ios
Versions : 12.4, 15.0, 15.1
cisco ios xeAll Cisco IOS XE CVEs →
Versions : 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1

Weaknesses (CWE)

CWE-399

References (4)

Similar CVEs

Other vulnerabilities of type CWE-399

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring