Cisco Cisco IOS Software Release 12.2(35)SE

CSCso84726

Switch module interfaces configured as members of a private VLAN incorrectly send 
802.1Q-tagged packets with the private VLAN ID in the tag. Hosts that receive these 802.1Q-tagged 
packets do not expect a tagged packet. Hosts are also not aware that the VLAN ID in the tag is a 
private VLAN ID used internally by the switch module. Interfaces that are members of a private 
VLAN do not normally send 802.1Q-tagged packets. (Normal egress packets are untagged.)

There is no workaround. We recommend not configuring switch module interfaces as members of a 
private VLAN.

These are the caveats that have been resolved in this release. 

CSCsj85065

A Cisco IOS device may crash while processing an SSL packet. This can happen during the 
termination of an SSL-based session. The offending packet is not malformed and is normally 
received as part of the packet exchange.

Cisco has released free software updates that address this vulnerability.

Aside from disabling affected services, there are no available workarounds to mitigate an exploit of 
this vulnerability.

This advisory is posted at 

.

This section provides updates to the product documentation:

This is the update to switch module device manager online help:

For Catalyst Switch Module 3110G and 3012, the physical LED behavior is different from the LED 
behavior on the device manager.

For more information about the switch module, see these documents on Cisco.com: