vulnerability: Cisco IOS XE up to 3.1.2 on ASR 1000 Virtual Fragment Reassembly Crash denial of service : 8/28/2015 10:58:00 AM

Group Chat & IM for Teams

Communicate with co-workers in real time. Used by Netflix, Dropbox & Salesforce. $0/unlimited users. Get started >>

From our sponsors

Vulnerability Advisories

Vulnerabilities of scip VulDB

Cisco IOS XE up to 3.1.2 on ASR 1000 Virtual Fragment Reassembly Crash denial of service
8/25/2015 7:00:00 PM

General

scipID: 77477
Affected: Cisco IOS XE up to 3.1.2
Published: 08/26/2015
Risk: problematic

Created: 08/28/2015
Entry: 72.4% complete

Summary

A vulnerability was found in Cisco IOS XE up to 3.1.2 on ASR 1000 and classified as problematic. This issue affects an unknown function of the component Virtual Fragment Reassembly. The manipulation with an unknown input leads to a denial of service vulnerability (crash). Impacted is availability.

The weakness was disclosed 08/26/2015 as 40690 / CSCtf87624 / CSCte93229 / CSCtd19103 / CSCti63623 as confirmed vulnerability alert (Website). The advisory is shared for download at tools.cisco.com. The identification of this vulnerability is CVE-2015-6273. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available.

Applying a patch is able to eliminate this problem. The vulnerability is also documented in the vulnerability database at SecurityTracker (ID 1033408).