Description
Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034570
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160104-iosxr
Scores
CVSS v3
7.5
EPSS
0.0176
EPSS Percentile
75.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-399
Status
published
Products (9)
cisco/ios_xr
4.2.0
cisco/ios_xr
4.3.0
cisco/ios_xr
5.0.0
cisco/ios_xr
5.1.0
cisco/ios_xr
5.2.0
cisco/ios_xr
5.2.2
cisco/ios_xr
5.2.4
cisco/ios_xr
5.3.0
cisco/ios_xr
5.3.2
Published
Jan 05, 2016
Tracked Since
Feb 18, 2026