CVE-2015-0598

Cisco IOS and IOS XE - Denial of Service via Crafted IPv6 Attributes in RADIUS Access-Accept Packets

Title source: llm

Description

The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031842

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0598

Scores

EPSS 0.0150

EPSS Percentile 71.6%

Details

CWE

CWE-19

Status published

Products (2)

cisco/ios

cisco/ios_xe

Published Mar 06, 2015

Tracked Since Feb 18, 2026