CVE-2017-6731

HIGH

Cisco IOS XR - Unauthenticated Denial of Service via MSDP Ingress Packet Processing

Title source: llm
STIX 2.1

Description

A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, causing a short denial of service (DoS) condition. The MSDP session will restart within a few seconds. More Information: CSCvd94828. Known Affected Releases: 4.3.2.MCAST 6.0.2.BASE. Known Fixed Releases: 6.3.1.19i.MCAST 6.2.3.1i.MCAST 6.2.2.17i.MCAST 6.1.4.12i.MCAST.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038820

Scores

CVSS v3 7.5
EPSS 0.0159
EPSS Percentile 72.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (3)
cisco/ios_xr 4.3.2.mcast
cisco/ios_xr 6.0.2.base
n/a/Cisco IOS XR Cisco IOS XR
Published Jul 10, 2017
Tracked Since Feb 18, 2026