CVE-2015-0618

Cisco IOS XR 5.0.1, 5.1.3, 5.1.4, 5.2.1 - Denial of Service via Malformed IPv6 Extension Headers

Title source: llm

Description

Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X (CRS-X) devices allows remote attackers to cause a denial of service (line-card reload) via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/72713

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031778

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150220-ipv6

Scores

EPSS 0.0232

EPSS Percentile 81.6%

Details

CWE

CWE-19

Status published

Products (4)

cisco/carrier_routing_system 5.1.3

cisco/carrier_routing_system 5.1.4

cisco/ios_xr 5.0.1

cisco/ios_xr 5.2.1

Published Feb 21, 2015

Tracked Since Feb 18, 2026