Cisco IOS XE up to 2.2.3/2.3.0 on ASR 1000 NAT Application Layer Gateway H.323 Packet Crash denial of service : 9/1/2015 5:09:03 AM
 | Create a free account with New Relic and get this swanky shirt for FREE! From our sponsors |
| Vulnerability Advisories |
| Vulnerabilities of scip VulDB |
Cisco IOS XE up to 2.2.3/2.3.0 on ASR 1000 NAT Application Layer Gateway H.323 Packet Crash denial of service
8/30/2015 7:00:00 PM
General
scipID: 77502
Affected: Cisco IOS XE up to 2.2.3/2.3.0
Published: 08/31/2015
Risk: problematic
Created: 09/01/2015
Entry: 72.4% complete
Summary
A vulnerability, which was classified as problematic, was found in Cisco IOS XE up to 2.2.3/2.3.0 on ASR 1000. Affected is an unknown function of the component NAT Application Layer Gateway. The manipulation as part of a H.323 Packet leads to a denial of service vulnerability (crash). This is going to have an impact on availability.
The weakness was disclosed 08/31/2015 as CSCsx35393/CSCsx07094/CSCsw93064 as confirmed advisory (Website). The advisory is shared for download at tools.cisco.com. This vulnerability is traded as CVE-2015-6272. It is possible to launch the attack remotely. The exploitation doesn’t require any form of authentication. The technical details are unknown and an exploit is not available.
The vulnerability is also documented in the vulnerability database at X-Force (105965).CVSS
Base Score: 4.3 (CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P) [?]
Temp Score: 3.2 (CVSS2#E:U/RL:OF/RC:C) [?]
CPE
Exploiting
Class: Denial of service
Local: No
Remote: Yes
Availability: No
Status: Unproven
Countermeasures
Recommended: no mitigation known
Status: Official fix
0-Day Time: 0 days since found
Timeline
08/31/2015 | Advisory disclosed
09/01/2015 | VulDB entry created
09/01/2015 | VulDB entry updated
Sources
Advisory: CSCsx35393/CSCsx07094/CSCsw93064
Status: Confirmed
CVE: CVE-2015-6272 (mitre.org) (nvd.nist.org) (cvedetails.com)
X-Force: 105965 – Cisco ASR 1000 Aggregation Services Routers H.323 denial of service
You are receiving this email because you subscribed to this feed at feedmyinbox.com
If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions