CVE-2015-4203

Cisco IOS 12.2SCH - Denial of Service via Malformed MPLS 6VPE Packets

Title source: llm
STIX 2.1

Description

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032692
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39439
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/75339

Scores

EPSS 0.0222
EPSS Percentile 80.5%

Details

CWE
CWE-362
Status published
Products (2)
cisco/ios 12.2\(33\)sch
cisco/ios 12.2sch
Published Jun 23, 2015
Tracked Since Feb 18, 2026