CVEvulnerability
CVE-2015-4203
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.4 MEDIUM — AV:N/AC:H/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-362
Description
Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.
Affected configurations
• cisco ios 12.2\(33\)sch
• cisco ios 12.2sch
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39439 Vendor Advisory
- http://www.securityfocus.com/bid/75339 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032692 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39439 Vendor Advisory
- http://www.securityfocus.com/bid/75339 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032692 Third Party Advisory, VDB Entry