CoreCVE
Back

HIGH

The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354

Published Oct 22, 2011

Description

The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner cisco
Published Oct 22, 2011
Updated Sep 16, 2024
Reserved Apr 5, 2011
Link CVE-2011-1640
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2011-1640
Red Hat
Severity n/a
Public date n/a
Links CVE-2011-1640