CVEvulnerability
CVE-2015-0638
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4 packets, aka Bug ID CSCsi02145.
Affected configurations
• cisco ios 12.2\(33\)ird1
• cisco ios 12.2\(33\)ire3
• cisco ios 12.2\(33\)sxi4b
• cisco ios 12.2\(44\)sq1
• cisco ios 12.4\(25e\)jam1
• cisco ios 12.4\(25e\)jap1m
• cisco ios 12.4\(25e\)jaz1
• cisco ios 15.0\(2\)ed1
• cisco ios 15.2\(1\)ex
• cisco ios 15.2\(2\)gc
• cisco ios 15.2\(2\)ja
• cisco ios 15.2\(2\)ja1
• cisco ios 15.2\(2\)jax
• cisco ios 15.2\(2\)jax1
• cisco ios 15.2\(2\)jb
• cisco ios 15.2\(2\)jb1
• cisco ios 15.2\(2\)jb2
• cisco ios 15.2\(2\)jb3
• cisco ios 15.2\(2\)jb4
• cisco ios 15.2\(2\)jn1
• cisco ios 15.2\(2\)jn2
• cisco ios 15.2\(2\)t
• cisco ios 15.2\(2\)t1
• cisco ios 15.2\(2\)t2
• cisco ios 15.2\(2\)t3
• cisco ios 15.2\(2\)t4
• cisco ios 15.2\(3\)t
• cisco ios 15.3\(2\)s2
• cisco ios 15.3\(3\)ja1n
• cisco ios 15.3\(3\)jab1
• cisco ios 15.3\(3\)jn
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-wedge Vendor Advisory
- http://www.securitytracker.com/id/1031983 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-wedge Vendor Advisory
- http://www.securitytracker.com/id/1031983 www.securitytracker.com