PT-2015-6450 · Cisco · Cisco Ios Xr

Publicado 2015-06-17 · Atualizado 2016-12-28 · CVE-2015-4191

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.2.1

Description A vulnerability in IP version 6 (IPv6) processing could allow an unauthenticated, remote attacker to cause a reload of the ipv6 io service. The issue is due to improper processing of a malformed IPv6 packet by a device configured to process such packets. An attacker could exploit this by sending a malformed IPv6 packet to a device configured for IPv6. To exploit this, an attacker may need additional information about the targeted device, such as its IPv6 configuration.

Recommendations For Cisco IOS XR version 5.2.1, update to a newer version that includes the fix for this issue, as confirmed by Cisco. As a temporary workaround, consider restricting access to IPv6 packets or disabling IPv6 processing on the device until a patch is applied.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-4191

Produtos afetados

Cisco Ios Xr

Referências · 5

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39383 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150617-CVE-2015-4191 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4191 · Nota de Segurança
• http://securityfocus.com/bid/75260 · Nota
• http://securitytracker.com/id/1032615 · Nota