PT-2016-1017 · Cisco · Cisco Ios Xr

Published 2016-01-04 · Updated 2016-12-07 · CVE-2015-6432

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.2.0 through 5.3.2

Description The issue is related to the handling of Open Shortest Path First (OSPF) Link State Advertisement (LSA) updates, specifically with the number of Path Computation Elements (PCEs) configured for an OSPF LSA opaque area update. This could allow a remote attacker to cause a denial of service (DoS) condition by sending a crafted OSPF LSA update. The exploitation of this issue can lead to the OSPF process restarting when the crafted update is received.

Recommendations For Cisco IOS XR versions 4.2.0 through 5.3.2, update to a fixed software version to address this issue. As a temporary workaround, consider restricting the number of OSPF Path Computation Elements (PCEs) for OSPF LSA opaque area updates to minimize the risk of exploitation.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-399

CWE-400

Related Identifiers

BDU:2016-00080

CVE-2015-6432

Affected Products

Cisco Ios Xr

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-6432 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160104-iosxr · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160104-iosxr · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00080 · Security Note
• http://securitytracker.com/id/1034570 · Note