Lucene search

[email protected]CVE-2016-6355

HistoryAug 23, 2016 - 2:11 a.m.

CVE-2016-6355

2016-08-2302:11:03

CWE-399

[email protected]

web.nvd.nist.gov

cve-2016-6355

cisco ios xr

asr 9001

memory leak

denial of service

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%

JSON

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets, aka Bug ID CSCux26791.

Affected configurations

NVD

Node

ciscoios_xrMatch5.1.0

ciscoios_xrMatch5.1.1

ciscoios_xrMatch5.1.1.k9sec

ciscoios_xrMatch5.1.2

ciscoios_xrMatch5.1.3

ciscoios_xrMatch5.2.0

ciscoios_xrMatch5.2.1

ciscoios_xrMatch5.2.2

ciscoios_xrMatch5.2.3

ciscoios_xrMatch5.2.4

ciscoios_xrMatch5.2.5

ciscoios_xrMatch5.3.0

ciscoios_xrMatch5.3.1

ciscoios_xrMatch5.3.2

CPENameOperatorVersion
cisco:ios_xrcisco ios xreq5.1.0
cisco:ios_xrcisco ios xreq5.1.1
cisco:ios_xrcisco ios xreq5.1.1.k9sec
cisco:ios_xrcisco ios xreq5.1.2
cisco:ios_xrcisco ios xreq5.1.3
cisco:ios_xrcisco ios xreq5.2.0
cisco:ios_xrcisco ios xreq5.2.1
cisco:ios_xrcisco ios xreq5.2.2
cisco:ios_xrcisco ios xreq5.2.3
cisco:ios_xrcisco ios xreq5.2.4

CPE	Name	Operator	Version
cisco:ios_xr	cisco ios xr	eq	5.1.0
cisco:ios_xr	cisco ios xr	eq	5.1.1
cisco:ios_xr	cisco ios xr	eq	5.1.1.k9sec
cisco:ios_xr	cisco ios xr	eq	5.1.2
cisco:ios_xr	cisco ios xr	eq	5.1.3
cisco:ios_xr	cisco ios xr	eq	5.2.0
cisco:ios_xr	cisco ios xr	eq	5.2.1
cisco:ios_xr	cisco ios xr	eq	5.2.2
cisco:ios_xr	cisco ios xr	eq	5.2.3
cisco:ios_xr	cisco ios xr	eq	5.2.4

Rows per page:

1-10 of 141

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-iosxr

www.securityfocus.com/bid/92399

www.securitytracker.com/id/1036585

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%

JSON

Related for CVE-2016-6355

openvas1 nessus1 prion1 nvd1 cisco1 cvelist1