Lucene search

K
nvd[email protected]NVD:CVE-2015-0646
HistoryMar 26, 2015 - 10:59 a.m.

CVE-2015-0646

2015-03-2610:59:11
CWE-399
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

9.1 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%

Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811.

Affected configurations

NVD
Node
ciscoios_xeMatch3.3xo.0
OR
ciscoios_xeMatch3.3xo.1
OR
ciscoios_xeMatch3.3xo.2
OR
ciscoios_xeMatch3.5e.0
OR
ciscoios_xeMatch3.5e.1
OR
ciscoios_xeMatch3.5e.2
OR
ciscoios_xeMatch3.5e.3
OR
ciscoios_xeMatch3.6e.0
OR
ciscoios_xeMatch3.6e.1
OR
ciscoios_xeMatch3.8s.0
OR
ciscoios_xeMatch3.8s.1
OR
ciscoios_xeMatch3.8s.2
OR
ciscoios_xeMatch3.8s_base
OR
ciscoios_xeMatch3.9s.0
OR
ciscoios_xeMatch3.9s.1
OR
ciscoios_xeMatch3.9s.2
OR
ciscoios_xeMatch3.10s.0
OR
ciscoios_xeMatch3.10s.0a
OR
ciscoios_xeMatch3.10s.1
OR
ciscoios_xeMatch3.10s.2
OR
ciscoios_xeMatch3.10s.3
OR
ciscoios_xeMatch3.10s.4
OR
ciscoios_xeMatch3.11s.0
OR
ciscoios_xeMatch3.11s.1
OR
ciscoios_xeMatch3.11s.2
OR
ciscoios_xeMatch3.11s.3
OR
ciscoios_xeMatch3.11s.4
OR
ciscoios_xeMatch3.12s.0
OR
ciscoios_xeMatch3.12s.1
Node
ciscoiosMatch12.2
OR
ciscoiosMatch12.4
OR
ciscoiosMatch15.0
OR
ciscoiosMatch15.1
OR
ciscoiosMatch15.2
OR
ciscoiosMatch15.3
OR
ciscoiosMatch15.4

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

9.1 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%