Lucene search

[email protected]CVE-2015-0646

HistoryMar 26, 2015 - 10:59 a.m.

CVE-2015-0646

2015-03-2610:59:11

CWE-399

[email protected]

web.nvd.nist.gov

cisco

ios

ios xe

memory leak

tcp

remote attackers

denial of service

cve-2015-0646

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.8%

JSON

Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811.

Affected configurations

NVD

Node

ciscoios_xeMatch3.3xo.0

ciscoios_xeMatch3.3xo.1

ciscoios_xeMatch3.3xo.2

ciscoios_xeMatch3.5e.0

ciscoios_xeMatch3.5e.1

ciscoios_xeMatch3.5e.2

ciscoios_xeMatch3.5e.3

ciscoios_xeMatch3.6e.0

ciscoios_xeMatch3.6e.1

ciscoios_xeMatch3.8s.0

ciscoios_xeMatch3.8s.1

ciscoios_xeMatch3.8s.2

ciscoios_xeMatch3.8s_base

ciscoios_xeMatch3.9s.0

ciscoios_xeMatch3.9s.1

ciscoios_xeMatch3.9s.2

ciscoios_xeMatch3.10s.0

ciscoios_xeMatch3.10s.0a

ciscoios_xeMatch3.10s.1

ciscoios_xeMatch3.10s.2

ciscoios_xeMatch3.10s.3

ciscoios_xeMatch3.10s.4

ciscoios_xeMatch3.11s.0

ciscoios_xeMatch3.11s.1

ciscoios_xeMatch3.11s.2

ciscoios_xeMatch3.11s.3

ciscoios_xeMatch3.11s.4

ciscoios_xeMatch3.12s.0

ciscoios_xeMatch3.12s.1

Node

ciscoiosMatch12.2

ciscoiosMatch12.4

ciscoiosMatch15.0

ciscoiosMatch15.1

ciscoiosMatch15.2

ciscoiosMatch15.3

ciscoiosMatch15.4

CPENameOperatorVersion
cisco:ios_xecisco ios xeeq3.3xo.0
cisco:ios_xecisco ios xeeq3.3xo.1
cisco:ios_xecisco ios xeeq3.3xo.2
cisco:ios_xecisco ios xeeq3.5e.0
cisco:ios_xecisco ios xeeq3.5e.1
cisco:ios_xecisco ios xeeq3.5e.2
cisco:ios_xecisco ios xeeq3.5e.3
cisco:ios_xecisco ios xeeq3.6e.0
cisco:ios_xecisco ios xeeq3.6e.1
cisco:ios_xecisco ios xeeq3.8s.0

CPE	Name	Operator	Version
cisco:ios_xe	cisco ios xe	eq	3.3xo.0
cisco:ios_xe	cisco ios xe	eq	3.3xo.1
cisco:ios_xe	cisco ios xe	eq	3.3xo.2
cisco:ios_xe	cisco ios xe	eq	3.5e.0
cisco:ios_xe	cisco ios xe	eq	3.5e.1
cisco:ios_xe	cisco ios xe	eq	3.5e.2
cisco:ios_xe	cisco ios xe	eq	3.5e.3
cisco:ios_xe	cisco ios xe	eq	3.6e.0
cisco:ios_xe	cisco ios xe	eq	3.6e.1
cisco:ios_xe	cisco ios xe	eq	3.8s.0