PT-2015-4762 · Cisco · Cisco Ios Xr+2

Published 2015-02-20 · Updated 2015-11-27 · CVE-2015-0618

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.0.1 through 5.2.1 on Network Convergence System (NCS) 6000 devices Cisco IOS XR versions 5.1.3 through 5.1.4 on Carrier Routing System X (CRS-X) devices

Description The issue allows remote attackers to cause a denial of service (line-card reload) via malformed IPv6 packets with extension headers. This is due to improper processing of malformed IPv6 packets carrying extension headers. An attacker could exploit this by sending a malformed IPv6 packet, carrying extension headers, through an affected Cisco IOS XR device line card, allowing the attacker to cause a reload of the line card on the affected Cisco IOS XR device.

Recommendations For Cisco IOS XR versions 5.0.1 through 5.2.1 on Network Convergence System (NCS) 6000 devices, update to a fixed software version. For Cisco IOS XR versions 5.1.3 through 5.1.4 on Carrier Routing System X (CRS-X) devices, update to a fixed software version. As a temporary workaround, consider restricting the processing of IPv6 packets with extension headers until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2015-0618

Affected Products

Carrier Routing System X

Cisco Ios Xr

Network Convergence System (Ncs) 6000

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150220-ipv6 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150220-ipv6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0618 · Security Note
• http://securityfocus.com/bid/72713 · Note
• http://securitytracker.com/id/1031778 · Note