Lucene search

K
cve[email protected]CVE-2015-0638
HistoryMar 26, 2015 - 10:59 a.m.

CVE-2015-0638

2015-03-2610:59:04
CWE-20
web.nvd.nist.gov
25
cisco
ios
vrf
interface
remote attackers
denial of service
icmpv4
packets
vulnerability

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.2%

Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4 packets, aka Bug ID CSCsi02145.

Affected configurations

NVD
Node
ciscoiosMatch12.2\(33\)ird1
OR
ciscoiosMatch12.2\(33\)ire3
OR
ciscoiosMatch12.2\(33\)sxi4b
OR
ciscoiosMatch12.2\(44\)sq1
OR
ciscoiosMatch12.4\(25e\)jam1
OR
ciscoiosMatch12.4\(25e\)jap1m
OR
ciscoiosMatch12.4\(25e\)jaz1
OR
ciscoiosMatch15.0\(2\)ed1
OR
ciscoiosMatch15.2\(1\)ex
OR
ciscoiosMatch15.2\(2\)gc
OR
ciscoiosMatch15.2\(2\)ja
OR
ciscoiosMatch15.2\(2\)ja1
OR
ciscoiosMatch15.2\(2\)jax
OR
ciscoiosMatch15.2\(2\)jax1
OR
ciscoiosMatch15.2\(2\)jb
OR
ciscoiosMatch15.2\(2\)jb1
OR
ciscoiosMatch15.2\(2\)jb2
OR
ciscoiosMatch15.2\(2\)jb3
OR
ciscoiosMatch15.2\(2\)jb4
OR
ciscoiosMatch15.2\(2\)jn1
OR
ciscoiosMatch15.2\(2\)jn2
OR
ciscoiosMatch15.2\(2\)t
OR
ciscoiosMatch15.2\(2\)t1
OR
ciscoiosMatch15.2\(2\)t2
OR
ciscoiosMatch15.2\(2\)t3
OR
ciscoiosMatch15.2\(2\)t4
OR
ciscoiosMatch15.2\(3\)t
OR
ciscoiosMatch15.3\(2\)s2
OR
ciscoiosMatch15.3\(3\)ja1n
OR
ciscoiosMatch15.3\(3\)jab1
OR
ciscoiosMatch15.3\(3\)jn

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.2%