CVEvulnerability
CVE-2015-6432
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-01-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486.
Affected configurations
• cisco ios xr 4.2.0
• cisco ios xr 4.3.0
• cisco ios xr 5.0.0
• cisco ios xr 5.1.0
• cisco ios xr 5.2.0
• cisco ios xr 5.2.2
• cisco ios xr 5.2.4
• cisco ios xr 5.3.0
• cisco ios xr 5.3.2
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160104-iosxr Vendor Advisory
- http://www.securitytracker.com/id/1034570 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160104-iosxr Vendor Advisory
- http://www.securitytracker.com/id/1034570 www.securitytracker.com