CVE-2015-4199
Cisco IOS 15.3S - Denial of Service via IPv6-to-IPv4 Race Condition
Title source: llmDescription
Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (NULL pointer free and module crash) by triggering intermittent connectivity with many IPv6 CPE devices, aka Bug ID CSCug47366.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032692
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39423
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75335
Scores
EPSS
0.0212
EPSS Percentile
79.6%
Details
CWE
CWE-362
Status
published
Products (1)
cisco/ios
15.3s
Published
Jun 27, 2015
Tracked Since
Feb 18, 2026