Lucene search

[email protected]CVE-2015-0639

HistoryMar 26, 2015 - 10:59 a.m.

CVE-2015-0639

2015-03-2610:59:05

CWE-20

[email protected]

web.nvd.nist.gov

cisco

ios xe

cve-2015-0639

denial of service

remote attackers

ipv6

udp

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.2%

JSON

The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation, aka Bug ID CSCua79665.

Affected configurations

NVD

Node

ciscoios_xeMatch3.6s

ciscoios_xeMatch3.6s.0

ciscoios_xeMatch3.6s.1

ciscoios_xeMatch3.6s.2

ciscoios_xeMatch3.7s

ciscoios_xeMatch3.7s.0

ciscoios_xeMatch3.7s.1

ciscoios_xeMatch3.7s.2

ciscoios_xeMatch3.7s.3

ciscoios_xeMatch3.7s.4

ciscoios_xeMatch3.7s.5

CPENameOperatorVersion
cisco:ios_xecisco ios xeeq3.6s
cisco:ios_xecisco ios xeeq3.6s.0
cisco:ios_xecisco ios xeeq3.6s.1
cisco:ios_xecisco ios xeeq3.6s.2
cisco:ios_xecisco ios xeeq3.7s
cisco:ios_xecisco ios xeeq3.7s.0
cisco:ios_xecisco ios xeeq3.7s.1
cisco:ios_xecisco ios xeeq3.7s.2
cisco:ios_xecisco ios xeeq3.7s.3
cisco:ios_xecisco ios xeeq3.7s.4

CPE	Name	Operator	Version
cisco:ios_xe	cisco ios xe	eq	3.6s
cisco:ios_xe	cisco ios xe	eq	3.6s.0
cisco:ios_xe	cisco ios xe	eq	3.6s.1
cisco:ios_xe	cisco ios xe	eq	3.6s.2
cisco:ios_xe	cisco ios xe	eq	3.7s
cisco:ios_xe	cisco ios xe	eq	3.7s.0
cisco:ios_xe	cisco ios xe	eq	3.7s.1
cisco:ios_xe	cisco ios xe	eq	3.7s.2
cisco:ios_xe	cisco ios xe	eq	3.7s.3
cisco:ios_xe	cisco ios xe	eq	3.7s.4